2026

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Eas

Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-online-o

Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover clover-o

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IniLerm Advanced I

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZAYTECH Smart Onli

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in e4jvikwp VikBooking Hote

Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-managem

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Ma

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 WPCS cu

Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allow

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStu

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive Prop

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Cont

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 Active

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Explo

Authorization Bypass Through User-Controlled Key vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter o

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings (D

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabl

The myLinksDump plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_title' parameter in all

The rexCrawler plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t

The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish Audit API endpoints

Access control failure means that an application does not effectively check user access permissions, so that unauthorize

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta Master Slid

Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allows Retrieve Embedded Sensitive

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. T

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData func

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile vi

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to impr

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to i

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuratio

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due t

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags functi

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags funct

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings fu

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings f

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData f

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash_layout.php file

An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveD