Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-89 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-49073	SQL Injection in sqli (CVE-2026-49073) SQL injection in sqli (CVE-2026-49073). Confidential information can be exposed externally.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-49076	Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions. Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39596	Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39438	Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions. Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-28576	SQL Injection in sqli (CVE-2026-28576) SQL injection in sqli (CVE-2026-28576). Confidential information can be exposed externally.	Medium	SQL Injection Cwe 89 Google Android	2 months ago
CVE-2026-22332	Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions. Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-22335	Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions. Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-22340	Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions. Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-12360	SQL Injection in wordpress (CVE-2026-12360) SQL injection in wordpress (CVE-2026-12360). Confidential information can be exposed externally.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2025-69135	Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions. Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-54313	SQL Injection in n8n (CVE-2026-54313) SQL injection in n8n (CVE-2026-54313). Data can be tampered with by attackers. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.24.0` or later.	High	Cwe 89 N8N	2 months ago
CVE-2026-54310	SQL Injection in n8n (CVE-2026-54310) SQL injection in n8n (CVE-2026-54310). Successful exploitation can lead to full system takeover. Exploitable via ``NODES_EXCLUDE``. Mitigation: upgrade to `2.25.7` or later.	Critical	Cwe 89 N8N	2 months ago
CVE-2026-52715	Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions. Unauthenticated SQL Injection in GEO my WordPress <= 4.5.5 versions.	Critical	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-52712	Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions. Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-49772	SQL Injection in sqli (CVE-2026-49772) SQL injection in sqli (CVE-2026-49772). Confidential information can be exposed externally.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39581	Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions. Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-39574	Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions. Unauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-8444	SQL Injection in wordpress (CVE-2026-8444) SQL injection in wordpress (CVE-2026-8444). Successful exploitation can lead to full system takeover.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-8443	SQL Injection in wordpress (CVE-2026-8443) SQL injection in wordpress (CVE-2026-8443). Successful exploitation can lead to full system takeover.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-49776	SQL Injection in wordpress (CVE-2026-49776) SQL injection in wordpress (CVE-2026-49776). Confidential information can be exposed externally.	Critical	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-52693	Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions. Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-52697	Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions. Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-52700	Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions. Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-48964	Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions. Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 versions.	High	WordPress SQL Injection Cwe 89	2 months ago
CVE-2026-49067	Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions. Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-48882	Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions. Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-48874	Subscriber SQL Injection in GamiPress <= 7.8.7 versions. Subscriber SQL Injection in GamiPress <= 7.8.7 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-48886	Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions. Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions.	Critical	JavaScript SQL Injection Cwe 89	2 months ago
CVE-2026-45439	Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions. Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-42665	Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-42639	Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-40771	Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-42381	Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions. Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-40766	Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions. Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-40798	Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-42386	Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions. Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39502	Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions. Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39530	Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions. Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-40762	Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions. Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-39519	Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39493	Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions. Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39512	Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions. Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39511	Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions. Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-39492	Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions. Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-24637	Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions. Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions.	High	SQL Injection Cwe 89	2 months ago
CVE-2026-39441	Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions. Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-50890	SQL Injection in sqli (CVE-2026-50890) SQL injection in sqli (CVE-2026-50890). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-48114	SQL Injection in sqli (CVE-2026-48114) SQL injection in sqli (CVE-2026-48114). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89 Cwe 287	2 months ago
CVE-2026-39196	SQL Injection in sqli (CVE-2026-39196) SQL injection in sqli (CVE-2026-39196). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 months ago
CVE-2026-38812	SQL Injection in sqli (CVE-2026-38812) SQL injection in sqli (CVE-2026-38812). Successful exploitation can lead to full system takeover.	Critical	SQL Injection Cwe 89	2 months ago

Vulnerabilities

🍪 About cookies