Search CVEs

Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.

Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.

Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.

Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.

The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the `post_args` and `topic_args` parameters in all versions up to, and including, 2.4.12 due to insufficient escaping o

Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the Subscriptions Manager in all versions up to, and including, 2.4.9 due to insufficient escaping on the user supplied paramet

The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'wpfob' parameter in all versions up to, and including, 2.4.14 due to insufficient escaping on the user supplied

Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.

wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted identifiers. Attackers

Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.

Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.

Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.

Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.

Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions.

Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.

Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.

Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions.

Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions.