The wpForo Forum plugin for WordPress contains a SQL Injection vulnerability in the 'data' parameter affecting all versions up to and including 3.2.1. This flaw allows unauthenticated attackers to inject additional SQL queries via certain forum configuration fields, potentially exposing sensitive database information. Exploitation requires specific forum form fields to be configured as multi-choice checkboxes or select/autocomplete with multi-choice enabled.
The wpForo Forum plugin for WordPress contains a time-based SQL Injection vulnerability in the 'href[locale]' parameter affecting all versions up to and including 3.2.2. This flaw allows unauthenticated attackers to inject additional SQL queries due to insufficient escaping and lack of proper query preparation. Exploitation requires a nonce that is publicly accessible to any visitor, meaning no authentication or prior interaction is needed.
The GamiPress – Gamification plugin for WordPress, including its AI integration, is vulnerable to an SQL Injection flaw in all versions up to and including 8.1.1. This vulnerability arises from insufficient escaping of the 'input_<field_id>.<part>' parameter used in Gravity Forms integration, allowing authenticated users with subscriber-level access or higher to inject additional SQL queries. Exploitation requires a configured GamiPress achievement tied to a Gravity Forms field value submission event with the form published, which is a common setup for sites using this integration.
The WebToffee WP Backup and Migration WordPress plugin up to version 1.6.1 contains a SQL Injection vulnerability via the 'description' parameter. Authenticated users with subscriber-level access or higher can inject SQL code due to insufficient input escaping. Exploitation requires an administrator to perform a local database export and restore operation, which is the plugin's primary function, to trigger the vulnerability. This vulnerability can lead to unauthorized disclosure of sensitive database information. The CVSS score is 5.7, indicating a medium severity risk.
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps WordPress plugin is vulnerable to SQL Injection via the 'engine' parameter in versions up to and including 5.5.90. Authenticated users with subscriber-level access or higher can exploit this vulnerability if an administrator has configured a Data Project page to allow lower-privileged roles. The flaw arises from insufficient escaping and lack of proper preparation of the SQL query, enabling attackers to append additional SQL commands to extract sensitive database information.
The Event Tickets with Ticket Scanner WordPress plugin versions before 3.2.9 contain an SQL injection vulnerability in several admin listings. This flaw allows users with admin area access to inject malicious SQL code due to improper escaping of search values in SQL queries. The vulnerability is fixed in version 3.2.9.
CVE-2026-17411 is a high-severity SQL injection vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. An authenticated attacker could exploit this flaw to view, add, modify, or delete information in the back-end database because input is not properly sanitized before being used in database queries.
CVE-2026-17407 is a high-severity SQL injection vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to execute arbitrary SQL commands by exploiting improper neutralization of input values during sign-in. This flaw could lead to complete compromise of confidentiality, integrity, and availability of the affected system's data.
CVE-2026-17400 is a high-severity SQL injection vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to obtain sensitive information from the system. The vulnerability does not affect system availability or integrity but compromises confidentiality.
CVE-2026-17396 is a critical SQL injection vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to obtain sensitive information by exploiting improper input handling in SQL queries.
CVE-2026-17363 is a high severity SQL injection vulnerability affecting IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to obtain sensitive information by exploiting improper input handling in SQL queries.
CVE-2026-17345 is a high-severity SQL Injection vulnerability in IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to obtain sensitive information by exploiting improper neutralization of special elements in SQL commands. The vulnerability does not impact integrity or availability but can lead to significant confidentiality breaches.
CVE-2026-17336 is a critical SQL Injection vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements in SQL queries. The vulnerability has a CVSS 3.1 score of 9.9, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-17134 is a critical SQL injection vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to execute arbitrary SQL commands, potentially leading to complete compromise of confidentiality, integrity, and availability of the affected system.
CVE-2026-17132 is a critical SQL Injection vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements in SQL queries.
CVE-2026-16854 is a SQL Injection vulnerability in IBM API Connect versions 12.1.0.0 through 12.1.1.2. It allows a remote authenticated attacker to exploit improper input neutralization in data queries, potentially exposing sensitive information from other tenants. The vulnerability does not impact data integrity or availability but can lead to unauthorized data disclosure.
The Affiliate Program Suite — SliceWP Affiliates WordPress plugin is affected by a SQL Injection vulnerability via the 'email' parameter in all versions up to and including 1.2.14. This flaw allows unauthenticated attackers to inject arbitrary SQL queries due to insufficient input escaping and lack of proper query preparation. The vulnerability is triggered during WooCommerce My Account registration through a guest-accessible nonce, enabling data extraction from the database without requiring authentication.
CVE-2026-54349 is a critical SQL injection vulnerability in Chartbrew versions prior to 5.2.1. It arises from unsafe handling of attacker-controlled JavaScript replacement strings in SQL dashboard-variable substitution, affecting public and embedded charts that use URL-controlled variables in stored SQL queries. The flaw allows unauthenticated users to inject SQL commands that can read, modify, or delete data accessible by the database account. The vulnerability is fixed in version 5.2.1.
FreeScout versions prior to 1.8.226 contain a SQL injection vulnerability in the polycast/receive endpoint. This flaw allows an unauthenticated attacker with a guest session and valid CSRF token to submit specially crafted wildcard channel names, bypassing channel authorization checks. As a result, the attacker can retrieve notification events and associated conversation message content, identifiers, URLs, and notification HTML intended for other users. The issue is resolved in version 1.8.226.
CVE-2026-121881 is an SQL injection vulnerability in Posit Software, PBC Posit Workbench versions before 2026.08.0. It affects the get_last_seen code-server session-state RPC, allowing authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. Exploitation requires a valid authenticated session but does not require administrative privileges. The vulnerability is limited to disclosure of database contents and does not allow modification or deletion of data.