Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to command execution.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to script injection.
The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' parameter in all versions up to, and including, 2.23.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks.
The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.
The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data from the database.
The WP Crowdfunding plugin for WordPress is vulnerable to generic SQL Injection via 'wpneo_reward' Post Meta in all versions up to, and including, 2.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with shop manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is a second-order injection: a Shop Manager writes the malicious payload once via the WooCommerce REST products endpoint (POST/PUT /wp-json/wc/v3/products/{id}), and the injected query executes on every subsequent public page view that renders the campaign rewards sidebar.
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 1.31.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The $wpdb->prepare() call does not protect against this injection because the attacker-controlled $contact_filter_query fragment is concatenated into the SQL format string before prepare() executes — prepare() only processes %s/%d placeholders and cannot sanitize content already embedded in the format string. REST API JSON bodies are parsed from php://input and bypass WordPress's wp_magic_quotes(), meaning double-quote characters in status array values reach the SQL sink unescaped. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The required 'mint_read_contacts' capability is a plugin-specific capability not assigned to any default WordPress role; it must be explicitly granted by an administrator, making this effectively an Administrator+ vulnerability.
Adobe ColdFusion 2025 contains a critical SQL Injection vulnerability (CVE-2026-75746) that allows an attacker with high privileges to execute arbitrary code without user interaction. This vulnerability involves improper neutralization of special elements in SQL commands, potentially leading to full compromise in the context of the current user. The vulnerability affects versions up to 12 and up to 23. The scope of impact is changed, indicating a broader effect beyond the initial component.
CVE-2026-66819 is a high-severity SQL Injection vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized attacker to elevate privileges over a network by improper neutralization of special elements in SQL commands. The vulnerability affects multiple versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-69636 is a SQL Injection vulnerability in Microsoft SharePoint Server Subscription Edition that allows an authorized attacker to disclose information over a network by improper neutralization of special elements in an SQL command. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20082. A fix is officially available in version 16.0.20326.20082. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity.
CVE-2026-66820 is a high-severity SQL injection vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized attacker to elevate privileges over a network by improper neutralization of special elements in SQL commands. The vulnerability affects multiple versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-69716 is a high-severity SQL injection vulnerability in Microsoft SharePoint Server Subscription Edition. It allows an authorized attacker to execute malicious SQL commands, potentially elevating privileges over a network. The vulnerability affects versions from 16.0.0 up to but not including 16.0.20326.20094. An official fix is available in version 16.0.20326.20094.
CVE-2026-67370 is a high-severity SQL injection vulnerability in Microsoft SQL Server 2017 (CU 31) that allows an authorized attacker to elevate privileges over a network by exploiting improper neutralization of special elements in SQL commands. The vulnerability affects multiple versions prior to specific fixed releases. An official fix is available from Microsoft.
CVE-2026-62895 is a high-severity vulnerability in Microsoft Azure Arc SQL Server Extension involving a permissive cross-domain security policy that includes untrusted domains. This flaw allows unauthorized attackers to elevate privileges over a network. The vulnerability affects versions from 1.0.0.0 up to but not including 1.1.3518.465. Microsoft has issued an official fix in version 1.1.3518.465. No known exploits are currently reported in the wild.
The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This vulnerability is exploitable due to an authorization bypass where the registered authorization callback fails to execute, allowing any authenticated user regardless of role to access administrative translation functionalities.
CVE-2026-44766 is a medium severity vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) that allows a low-privileged authenticated user to perform SQL injection by injecting malicious input into certain functions. This flaw can lead to unauthorized access to sensitive information, impacting confidentiality without affecting integrity or availability.