Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55634 |
|
SQL Injection in pimcore/pimcore (CVE-2026-55634)
SQL injection in pimcore/pimcore (CVE-2026-55634). Successful exploitation can lead to full system takeover. Exploitable via ``objects``. Mitigation: upgrade to `2026.1.6` or later.
|
| CVE-2026-5097 |
|
SQL Injection in wordpress (CVE-2026-5097)
SQL injection in wordpress (CVE-2026-5097). Confidential information can be exposed externally.
|
| CVE-2026-75417 |
|
SQL Injection in sqli (CVE-2026-75417)
SQL injection in sqli (CVE-2026-75417). Successful exploitation can lead to full system takeover.
|
| CVE-2026-81728 |
|
SQL Injection in sqli (CVE-2026-81728)
SQL injection in sqli (CVE-2026-81728). Confidential information can be exposed externally.
|
| CVE-2026-32564 |
|
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
|
| CVE-2026-81203 |
|
Vulnerability in sqli (CVE-2026-81203)
vulnerability in sqli (CVE-2026-81203). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-18884 |
|
SQL Injection in wordpress (CVE-2026-18884)
SQL injection in wordpress (CVE-2026-18884). Confidential information can be exposed externally.
|
| CVE-2026-19094 |
|
SQL Injection in wordpress (CVE-2026-19094)
SQL injection in wordpress (CVE-2026-19094). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79804 |
|
Vulnerability in sqli (CVE-2026-79804)
vulnerability in sqli (CVE-2026-79804). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-79845 |
|
Vulnerability in sqli (CVE-2026-79845)
vulnerability in sqli (CVE-2026-79845). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-75497 |
|
SQL Injection in CVE-2026-75497 (CVE-2026-75497)
SQL injection in CVE-2026-75497 (CVE-2026-75497). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
|
| CVE-2026-78468 |
|
SQL Injection in wordpress (CVE-2026-78468)
SQL injection in wordpress (CVE-2026-78468). Confidential information can be exposed externally.
|
| CVE-2026-75498 |
|
SQL Injection in CVE-2026-75498 (CVE-2026-75498)
SQL injection in CVE-2026-75498 (CVE-2026-75498). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `123c97c` or later.
|
| CVE-2026-77824 |
|
SQL Injection in wordpress (CVE-2026-77824)
SQL injection in wordpress (CVE-2026-77824). Confidential information can be exposed externally.
|
| CVE-2026-19949 |
|
SQL Injection in wordpress (CVE-2026-19949)
SQL injection in wordpress (CVE-2026-19949). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78576 |
|
SQL Injection in wordpress (CVE-2026-78576)
SQL injection in wordpress (CVE-2026-78576). Confidential information can be exposed externally.
|
| CVE-2026-78568 |
|
SQL Injection in wordpress (CVE-2026-78568)
SQL injection in wordpress (CVE-2026-78568). Successful exploitation can lead to full system takeover.
|
| CVE-2026-78656 |
|
Vulnerability in sqli (CVE-2026-78656)
vulnerability in sqli (CVE-2026-78656). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78470 |
|
SQL Injection in wordpress (CVE-2026-78470)
SQL injection in wordpress (CVE-2026-78470). Confidential information can be exposed externally.
|
| CVE-2026-15023 |
|
SQL Injection in wordpress (CVE-2026-15023)
SQL injection in wordpress (CVE-2026-15023). Confidential information can be exposed externally.
|
| CVE-2026-77635 |
|
SQL Injection in sqli (CVE-2026-77635)
SQL injection in sqli (CVE-2026-77635). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78248 |
|
Vulnerability in sqli (CVE-2026-78248)
vulnerability in sqli (CVE-2026-78248). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78247 |
|
Vulnerability in sqli (CVE-2026-78247)
vulnerability in sqli (CVE-2026-78247). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78246 |
|
Vulnerability in sqli (CVE-2026-78246)
vulnerability in sqli (CVE-2026-78246). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78244 |
|
Vulnerability in sqli (CVE-2026-78244)
vulnerability in sqli (CVE-2026-78244). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78199 |
|
Vulnerability in sqli (CVE-2026-78199)
vulnerability in sqli (CVE-2026-78199). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78200 |
|
Vulnerability in sqli (CVE-2026-78200)
vulnerability in sqli (CVE-2026-78200). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78197 |
|
Vulnerability in sqli (CVE-2026-78197)
vulnerability in sqli (CVE-2026-78197). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78198 |
|
Vulnerability in sqli (CVE-2026-78198)
vulnerability in sqli (CVE-2026-78198). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78201 |
|
Vulnerability in sqli (CVE-2026-78201)
vulnerability in sqli (CVE-2026-78201). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78185 |
|
Vulnerability in sqli (CVE-2026-78185)
vulnerability in sqli (CVE-2026-78185). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78171 |
|
Vulnerability in sqli (CVE-2026-78171)
vulnerability in sqli (CVE-2026-78171). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78143 |
|
Vulnerability in sqli (CVE-2026-78143)
vulnerability in sqli (CVE-2026-78143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-78112 |
|
Vulnerability in sqli (CVE-2026-78112)
vulnerability in sqli (CVE-2026-78112). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76904 |
|
SQL Injection in org.geotools.jdbc:gt-jdbc-postgis (CVE-2026-76904)
SQL injection in org.geotools.jdbc:gt-jdbc-postgis (CVE-2026-76904). Successful exploitation can lead to full system takeover. Exploitable via ``jsonArrayContains``. Mitigation: upgrade to `33.6` or later.
|
| CVE-2026-16959 |
|
SQL Injection in wordpress (CVE-2026-16959)
SQL injection in wordpress (CVE-2026-16959). Confidential information can be exposed externally.
|
| CVE-2026-14601 |
|
SQL Injection in wordpress (CVE-2026-14601)
SQL injection in wordpress (CVE-2026-14601). Confidential information can be exposed externally.
|
| CVE-2026-77392 |
|
Vulnerability in sqli (CVE-2026-77392)
vulnerability in sqli (CVE-2026-77392). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68782 |
|
SQL Injection in sqli (CVE-2026-68782)
SQL injection in sqli (CVE-2026-68782). Successful exploitation can lead to full system takeover.
|
| CVE-2026-68789 |
|
SQL Injection in sqli (CVE-2026-68789)
SQL injection in sqli (CVE-2026-68789). Successful exploitation can lead to full system takeover.
|
| CVE-2026-77025 |
|
Vulnerability in sqli (CVE-2026-77025)
vulnerability in sqli (CVE-2026-77025). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77019 |
|
Vulnerability in sqli (CVE-2026-77019)
vulnerability in sqli (CVE-2026-77019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-77020 |
|
Vulnerability in sqli (CVE-2026-77020)
vulnerability in sqli (CVE-2026-77020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76998 |
|
Vulnerability in sqli (CVE-2026-76998)
vulnerability in sqli (CVE-2026-76998). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76997 |
|
Vulnerability in sqli (CVE-2026-76997)
vulnerability in sqli (CVE-2026-76997). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63039 |
|
SQL Injection in apache (CVE-2026-63039)
SQL injection in apache (CVE-2026-63039). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63038 |
|
SQL Injection in apache (CVE-2026-63038)
SQL injection in apache (CVE-2026-63038). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63037 |
|
SQL Injection in apache (CVE-2026-63037)
SQL injection in apache (CVE-2026-63037). Successful exploitation can lead to full system takeover.
|
| CVE-2026-76991 |
|
Vulnerability in sqli (CVE-2026-76991)
vulnerability in sqli (CVE-2026-76991). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-76996 |
|
Vulnerability in sqli (CVE-2026-76996)
vulnerability in sqli (CVE-2026-76996). Risk of unauthorized operations or information disclosure.
|