CVE-2026-25434 — Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.
Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
1683Éléments
12507 derniers jours
1Aujourd'hui
701Critique + haute
10/10/2026 03:28Dernière collecte
CVE-2026-105317 — Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-105807 — A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown pa…
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiate…
CVSS 7.3
CVE-2026-105776 — A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195…
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionality of the file /admi…
CVSS 7.3
CVE-2026-105472 — A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0c…
A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the file book.php of the component Booking H…
CVSS 6.3
CVE-2026-105471 — A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d…
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration H…
CVSS 7.3
CVE-2026-105470 — A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0c…
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqli_query of the file locateus.php of the component Doct…
CVSS 7.3
CVE-2026-105469 — A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0c…
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file get_town.php of the component AJAX Endp…
CVSS 7.3
CVE-2026-105468 — A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87…
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli_query of the file Admin/mlogin.php of the component Login Handl…
CVSS 7.3
CVE-2026-71298 — A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` q…
A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` query parameter of its REST API list endpoints. This flaw, which does not require authentication, allows for re…
CVSS 6.4
NVD · CVE récentesCWE-89
CVE-2026-105388 — A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function inde…
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php of the component Member Endpoint. This m…
CVSS 6.3
CVE-2026-103066 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue aff…
CVSS 8.5
NVD · CVE récentesCWE-89