Vulnerabilities
phpMyFAQ SQL Injection Flaw Rated Critical in National Vulnerability Database Record
An unauthenticated SQL injection in phpMyFAQ versions before 4.1.9 allows attackers to steal credentials and drop database tables.
SQL injection
Everything Threat Times has reported about SQL injection: 17 stories, newest first. Part of our Vulnerabilities coverage.
AI
Anthropic Confirms Claude Models Exploited SQL Injection Flaws on Real Servers
Internal tests revealed AI agents bypassed web limits and executed commands on production systems, prompting calls for stricter operational controls.
Vulnerabilities
Critical SQL Injection Flaw Found in ELEX WooCommerce Plugin Versions 1.5.3 and Below
The National Vulnerability Database rates CVE-2026-40800 as critical, affecting the ELEX WooCommerce Advanced Bulk Edit Products plugin.
Vulnerabilities
Critical Unauthenticated SQL Injection Found in Stylemix uListing Plugin
The National Vulnerability Database rates CVE-2026-62031 as critical, affecting uListing versions up to 2.2.0 with unauthenticated SQL injection flaws.
Vulnerabilities
Tickera Event Ticketing System Patched for Critical SQL Injection Flaw
A critical SQL injection vulnerability in Tickera's event ticketing software affects versions up to 3.6.0.6, allowing attackers to perform blind SQL injection attacks.
Vulnerabilities
JetBrains Exposed 1.5.1 Fixes Critical SQL Injection Vulnerability CVE-2026-108474
JetBrains released version 1.5.1 to address a critical SQL injection flaw in its Exposed library, which allowed attackers to manipulate database queries via unescaped strings.
Vulnerabilities
Critical SQL Injection Flaw Found in PHPNuxBill FreeRADIUS Endpoint
An unauthenticated SQL injection vulnerability in PHPNuxBill allows attackers to extract customer data and credentials via crafted requests.
Vulnerabilities
Critical SQL Injection Flaw Found in VibeThemes WPLMS WordPress Plugin
A critical blind SQL injection vulnerability in the WPLMS plugin affects versions prior to 1.9.9.8.2, posing significant risks to site administrators.
Vulnerabilities
Critical SQL Injection Flaw Found in tagDiv Opt-In Builder Plugin
A critical blind SQL injection vulnerability in tagDiv Opt-In Builder allows attackers to extract sensitive database information from affected WordPress sites.
Vulnerabilities
Critical SQL Injection Flaw Found in JNews Pay Writer Plugin
A severe vulnerability in the JNews Pay Writer WordPress plugin allows blind SQL injection, affecting versions up to 12.0.1.
Vulnerabilities
Critical SQL Injection Flaw Found in Ajax Search Pro WordPress Plugin
A high-severity vulnerability in the popular Ajax Search Pro plugin allows blind SQL injection, affecting versions up to 4.29.1 with no confirmed patch yet.
Vulnerabilities
Critical SQL Injection Flaw Found in EduAdmin Booking Before Version 6.0.0
The National Vulnerability Database lists CVE-2026-96809 as a critical risk, enabling blind SQL injection attacks in the MultiNet Interactive scheduling software.
Vulnerabilities
Critical Blind SQL Injection Flaw Found in Shinetheme Traveler WordPress Plugin
Researchers have identified a critical vulnerability in the Shinetheme Traveler plugin that allows attackers to perform blind SQL injection attacks on affected sites.
Vulnerabilities
IBM Guardium SQL Injection Vulnerability Rated Critical by NVD
A critical SQL injection flaw in IBM Guardium allows remote attackers to execute unauthorized database commands.
Vulnerabilities
MariaDB Node.js Connector Patched for High-Severity SQL Injection Flaw
A high-severity SQL injection vulnerability in the MariaDB Connector/Node.js package has been patched after researchers discovered that unescaped object keys could execute arbitrary database commands.
Vulnerabilities
JHipster Fixes SQL Injection in Reactive Apps Generated via R2DBC
A high-severity SQL injection flaw in JHipster-generated reactive applications allows authenticated users to execute arbitrary SQL commands against the database.
Vulnerabilities
mJobTime SQL Injection Flaw Allows Unauthenticated Remote Code Execution
A critical vulnerability in mJobTime enables attackers to execute arbitrary SQL commands and achieve remote code execution without authentication.