All CVEs — page 308 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows SQL injection for subscribers in Woffice versions 5.4.35 and earlier, enabling attackers to manipulate database queries and potentially gain unauthorized access to sensitive data.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or manipulation.
A remote code execution vulnerability exists in Content Visibility for Divi Builder versions up to 5.03, allowing attackers to execute arbitrary code on the server.
A SQL injection vulnerability exists in WooCommerce Lottery plugin versions up to 2.2.9, allowing unauthenticated attackers to execute arbitrary SQL commands against the WordPress database. This could lead to data theft, unauthorized access, or further compromise of the WordPress site.
The flaw allows unauthenticated users to upload arbitrary files, which can lead to unauthorized access and control of the system.