CVE-2026-42415 — Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
1683Items
1250Last 7 days
1Today
701Critical + high
10/10/2026 03:28Last collection
CVE-2026-42414 — Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-41555 — Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5…
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-39795 — Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-39785 — Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
Unauthenticated SQL Injection in Gmedia Photo Gallery <= 1.25.1 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-39771 — Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-39764 — Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 vers…
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-39747 — Subscriber SQL Injection in Woffice <= 5.4.35 versions.
Subscriber SQL Injection in Woffice <= 5.4.35 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-39746 — Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-32581 — Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
CVSS 7.1
NVD · CVE récentesCWE-89
CVE-2026-32580 — Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.
Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.
CVSS 7.5
NVD · CVE récentesCWE-89
CVE-2026-32557 — Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.
Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.
CVSS 9.3
NVD · CVE récentesCWE-89