All CVEs — page 589 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A SQL injection vulnerability exists in the MC Woocommerce Wishlist plugin versions up to 1.9.21, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers who have gained admin access to escalate their privileges or manipulate database contents.
A SQL injection vulnerability in PublishPress Series plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database compromise and unauthorized access to sensitive content.
A SQL injection vulnerability in WP-Lister Lite for eBay allows authenticated shop managers to execute arbitrary database queries, potentially leading to data exposure or manipulation. This is particularly concerning because shop managers typically have elevated privileges within e-commerce platforms.
A SQL injection vulnerability exists in SKT Addons for Elementor plugin versions up to 4.0, allowing authenticated attackers with high privileges to execute arbitrary SQL commands on the database server.
A SQL injection vulnerability exists in WC Vendors Marketplace plugin versions up to 2.7.2.1, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers with admin credentials to manipulate the database directly, potentially leading to data theft, privilege escalation, or unauthorized modifications.
A SQL injection vulnerability in WPMasterToolKit plugin allows authenticated administrators to execute arbitrary SQL commands, potentially leading to full database compromise and unauthorized access to sensitive data.
A SQL injection vulnerability in the Newsletters plugin allows authenticated administrators to execute arbitrary database queries, potentially leading to full system compromise. This affects versions 4.18 and earlier.
A SQL injection vulnerability exists in WP Maps plugin versions up to 4.9.9, allowing authenticated administrators to execute arbitrary SQL commands. This flaw enables attackers who have gained admin access to escalate their privileges or manipulate database content.
This flaw allows SQL injection in the Product Feed Manager, enabling attackers to execute arbitrary SQL commands, potentially leading to data theft or corruption.