Vulnerabilities
Critical SQL Injection Flaw Found in ELEX WooCommerce Plugin Versions 1.5.3 and Below
The National Vulnerability Database rates CVE-2026-40800 as critical, affecting the ELEX WooCommerce Advanced Bulk Edit Products plugin.
CWE-89
Everything Threat Times has reported about CWE-89: 7 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Tickera Event Ticketing System Patched for Critical SQL Injection Flaw
A critical SQL injection vulnerability in Tickera's event ticketing software affects versions up to 3.6.0.6, allowing attackers to perform blind SQL injection attacks.
Vulnerabilities
JetBrains Exposed 1.5.1 Fixes Critical SQL Injection Vulnerability CVE-2026-108474
JetBrains released version 1.5.1 to address a critical SQL injection flaw in its Exposed library, which allowed attackers to manipulate database queries via unescaped strings.
Vulnerabilities
Critical SQL Injection Flaw Found in PHPNuxBill FreeRADIUS Endpoint
An unauthenticated SQL injection vulnerability in PHPNuxBill allows attackers to extract customer data and credentials via crafted requests.
Vulnerabilities
Critical SQL Injection Flaw Found in EduAdmin Booking Before Version 6.0.0
The National Vulnerability Database lists CVE-2026-96809 as a critical risk, enabling blind SQL injection attacks in the MultiNet Interactive scheduling software.
Vulnerabilities
Critical Blind SQL Injection Flaw Found in Shinetheme Traveler WordPress Plugin
Researchers have identified a critical vulnerability in the Shinetheme Traveler plugin that allows attackers to perform blind SQL injection attacks on affected sites.
Vulnerabilities
IBM Guardium SQL Injection Vulnerability Rated Critical by NVD
A critical SQL injection flaw in IBM Guardium allows remote attackers to execute unauthorized database commands.