Base de CVEs

CVE-2026-39512 Crítica · 9.3 CWE-89 15/06/2026

WordPress GeoDirectory plugin <= 2.8.152 - SQL Injection vulnerability

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

CVE-2026-39511 Crítica · 9.3 CWE-89 15/06/2026

WordPress WP Photo Album Plus plugin <= 9.1.08.001 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.

CVE-2026-39502 Crítica · 9.3 CWE-89 15/06/2026

WordPress Form Maker by 10Web plugin <= 1.15.38 - SQL Injection vulnerability

Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.

CVE-2026-39493 Crítica · 9.3 CWE-89 15/06/2026

WordPress Simply Schedule Appointments plugin <= 1.6.9.27 - SQL Injection vulnerability

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions.

CVE-2026-39492 Crítica · 9.3 CWE-89 15/06/2026

Plugin WordPress WP Maps - Injeção de SQL não autenticada

Injeção de SQL não autenticada no WP Maps nas versões até 4.9.1 (inclusive).

CVE-2026-39441 Crítica · 9.3 CWE-89 15/06/2026

WordPress Feed KuantoKusta for WooCommerce – Free plugin <= 5.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.

CVE-2026-24637 Alta · 8.5 CWE-89 15/06/2026

WordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerability

Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions.

CVE-2026-50890 Crítica · 9.8 CWE-89 15/06/2026

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the…

Bernd Bestel grocy v4.6.0 was discovered to contain a SQL injection vulnerability in the product-group parameter at /stockreports/spendings. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

CVE-2026-48114 Crítica · 9.8 CWE-89 15/06/2026

Injeção de SQL não autenticada no NCEAS Metacat

O Metacat é um software de repositório de dados que ajuda pesquisadores a preservar, compartilhar e descobrir dados. As versões 2.0.0 e superiores contêm uma injeção de SQL não autenticada no endpoint /harvesterRegistration. HarvesterRegistration.dbInsert() monta um INSERT contra HARVEST_SITE_SCHEDULE por concatenação de strings, usando um auxiliar quoteString() que apenas envolve o valor em aspas simples, sem escape. Três parâmetros de requisição chegam ao ponto vulnerável: unit, contactEmail e documentListURL. O servlet não verifica uma identidade LDAP real. Isso permite que a inserção vulnerável prossiga. Como o backend PostgreSQL permite consultas empilhadas via Statement.executeUpdate(), a vulnerabilidade permite acesso completo de leitura, escrita e execução no contexto do banco de dados do Metacat. A vulnerabilidade foi corrigida no Metacat 3.0.0.

CVE-2026-39196 Crítica · 9.8 CWE-89 15/06/2026

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in…

Datadog, Inc Vector v0.54.0 was discovered to contain a SQL injection vulnerability in the set_uri_query parameter in the KeyPartitioner::partition function. This vulnerability allows attackers to access sensitive database information via crafted SQL statements.

CVE-2026-38812 Crítica · 9.8 CWE-89 15/06/2026

RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The…

RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generation module and may allow an authenticated attacker with administrative privileges to access sensitive database information.

CVE-2026-36670 Alta · 8.8 CWE-89 15/06/2026

A Time-Based Blind SQL Injection vulnerability in the alias_management module of…

A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias_management.php.

CVE-2019-25746 Alta · 7.1 CWE-89 15/06/2026

WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter

WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicate_quote_invoice and malicious 'post' values to extract sensitive database information or modify data.

CVE-2016-20073 Alta · 8.2 CWE-89 15/06/2026

Answer My Question 1.3 Plugin WordPress SQL Injection via modal.php

Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract sensitive database information including WordPress terms and configuration data.

CVE-2016-20072 Alta · 8.2 CWE-89 15/06/2026

BBS e-Franchise 1.1.1 WordPress Plugin SQL Injection via uid

BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the uid parameter. Attackers can craft requests to pages using the plugin's shortcode with UNION-based SQL injection in the uid parameter to extract sensitive data from the WordPress database including user information and taxonomy terms.

CVE-2016-20071 Alta · 8.2 CWE-89 15/06/2026

WordPress 404 Redirection Manager Plugin 1.0 SQL Injection

The 404 Redirection Manager plugin version 1.0 for WordPress contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through unsanitized user input. Attackers can craft GET requests with SQL injection payloads to manipulate database queries and extract sensitive information from the WordPress database.

CVE-2016-20069 Alta · 8.2 CWE-89 15/06/2026

WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the calendar parameter before using it in database queries. Attackers can inject SQL commands through the calendar shortcode parameter to execute arbitrary SQL queries and extract sensitive database information.

CVE-2016-20068 Alta · 8.2 CWE-89 15/06/2026

WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send requests to the admin-ajax.php endpoint with the action parameter set to 'dex_bccf_calendar_ajaxevent' and supply crafted SQL commands in the 'id' parameter to extract sensitive database information.

CVE-2026-6428 Alta · 7.6 CWE-89 13/06/2026

Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameter

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/.

CVE-2026-9848 Alta · 7.5 Exploit público CWE-89 13/06/2026

WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter

The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and including, 6.0.4 The plugin hooks WordPress's `posts_request` filter with `wp_ticket_com_posts_request()`, which calls `emd_author_search_results()` when the current request is an unauthenticated front-end search. That function reads `$query->query_vars['s']` — already wp_unslash()'d by `WP_Query::parse_query()`, so wp_magic_quotes protection has been stripped — and concatenates the raw value into a SQL `LIKE` clause inside a UNION sub-SELECT appended to the main query, with no `$wpdb->prepare()` or escaping. This makes it possible for unauthenticated attackers to append additional SQL queries into already-existing queries that can be used to extract sensitive information from the database.

CVE-2026-44172 Crítica · 9.1 CWE-89 12/06/2026

MariaDB: injeção de SQL contornando mysql_real_escape_string() com charset big5

O servidor MariaDB é um fork de código aberto mantido pela comunidade do servidor MySQL. Nas versões 3.3.18 e 3.4.8, uma aplicação que recebia entrada do usuário não validada, escapava essa entrada com mysql_real_escape_string() e a enviava ao banco de dados usando o protocolo de texto e o conjunto de caracteres big5 era vulnerável a injeções de SQL, mesmo que mysql_real_escape_string() devesse preveni-las. Este problema foi corrigido nas versões 3.3.19 e 3.4.9.

CVE-2026-41581 Média · 6.9 CWE-89 12/06/2026

Frappe Vulnerable to Possible SQL Injection via get_blog_list

Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get_blog_list. This issue has been patched in versions 15.106.0 and 16.16.0.

CVE-2026-48613 Média · 5.9 CWE-89 12/06/2026

SQL Injection em Phpbb

SQL injection vulnerability in phpBB profile field migration due to improper handling of user-supplied profile field data during migration, allowing execution of arbitrary SQL queries. Only applies to phpBB forums that had been updated from versions prior to phpBB 3.3.8 and have not been updated to 3.3.11 or newer yet.

CVE-2026-45418 Alta · 8.8 CWE-89 11/06/2026

ClipBucket: Blind SQL Injection in subtitle_edit.php

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #132, any authenticated user who can upload videos can add multiple subtitles from different files and change their title (English, Spanish...). The POST /actions/subtitle_edit.php request used to change their title includes a number parameter which is vulnerable to SQL Injection. A boolean-based blind SQL injection can be used to exfiltrate sensitive data. This issue has been patched in version 5.5.3 - #132.

CVE-2026-45060 Crítica · 9.8 CWE-89 11/06/2026

ClipBucket: Blind SQL Injection in progress_video.php

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php endpoint is vulnerable to blind SQL injection. Any unauthenticated user can exploit the ids parameter to execute SQL queries and exfiltrate sensitive data. This issue has been patched in version 5.5.3 - #129.