Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and includin…CVE-2026-97668 · Tyche Softwares · Abandoned Cart Pro for WooCommerce · CVE.org · NIST NVDOct 13, 2026
High7.5The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 1…CVE-2026-102251 · CVE.org · NIST NVDOct 13, 2026
Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionCVE-2026-108569 · Furion · .NET Framework · CIRCL Vulnerability Lookup · microsoftOct 11, 2026
HighPayload: SQL injection in SQLite/PostgresCVE-2026-105856 · CVE.org · FIRST EPSS · GitHub Advisory Database · npmEPSS 0.3%Oct 7, 2026
Critical9.8Cisco Secure Email Gateway SQL Injection VulnerabilityCVE-2026-76461 · Cisco · Secure Email Gateway · CISA KEV · CVE.org · FIRST EPSS · ciscoKEVEPSS 29.5%Sep 14, 2026
Critical10.0Metabase SQL Injection VulnerabilityCVE-2026-72898 · Metabase · Metabase · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 19.0%Aug 10, 2026
Medium5.9WordPress Core SQL Injection VulnerabilityCVE-2026-60137 · WordPress · Core · CISA KEV · CVE.org · FIRST EPSS · wordpressKEVEPSS 5.3%Jul 17, 2026
Critical9.3Sangoma Switchvox SQL Injection VulnerabilityCVE-2026-9586 · Sangoma · Switchvox · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 19.0%Jul 17, 2026
Critical9.8Drupal Core SQL Injection VulnerabilityCVE-2026-9082 · Drupal · Core · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 15.7%May 20, 2026
Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityCVE-2026-42208 · BerriAI · LiteLLM · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 5.8%May 7, 2026
Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityCVE-2026-21643 · Fortinet · FortiClient EMS · CISA KEV · CVE.org · FIRST EPSS · fortinetKEVEPSS 93.9%Feb 6, 2026
Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityCVE-2025-57819 · sangoma · freepbx · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 86.3%Aug 28, 2025
Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityCVE-2025-25257 · fortinet · fortiweb · CISA KEV · CVE.org · FIRST EPSS · fortinetKEVEPSS 99.8%Jul 17, 2025
High7.5Advantive VeraCore SQL Injection VulnerabilityCVE-2025-25181 · advantive · veracore · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 55.5%Feb 3, 2025
Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityCVE-2024-9465 · paloaltonetworks · expedition · CISA KEV · CVE.org · FIRST EPSS · paloaltoKEVEPSS 99.6%Oct 9, 2024
Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityCVE-2024-43468 · Microsoft · Configuration Manager · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 81.0%Oct 8, 2024
High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityCVE-2024-9379 · ivanti · endpoint manager cloud services appliance · CISA KEV · CVE.org · FIRST EPSS · ivantiKEVEPSS 43.8%Oct 8, 2024
Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityCVE-2024-6670 · progress · whatsup gold · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 93.0%Aug 29, 2024
High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityCVE-2024-29824 · ivanti · endpoint manager · CISA KEV · CVE.org · FIRST EPSS · ivantiKEVEPSS 99.9%May 31, 2024
Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityCVE-2023-48788 · fortinet · forticlient enterprise management server · CISA KEV · CVE.org · FIRST EPSS · fortinetKEVEPSS 98.4%Mar 12, 2024
High8.8F5 BIG-IP Configuration Utility SQL Injection VulnerabilityCVE-2023-46748 · f5 · big-ip access policy manager · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 4.5%Oct 26, 2023
Critical9.8Progress MOVEit Transfer SQL Injection VulnerabilityCVE-2023-34362 · progress · moveit cloud · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 99.9%Jun 2, 2023
Critical9.8Roundcube Webmail SQL Injection VulnerabilityCVE-2021-44026 · roundcube · webmail · CISA KEV · CVE.org · FIRST EPSS · debian, linuxKEVEPSS 69.9%Nov 18, 2021
Critical9.8BQE BillQuick Web Suite SQL Injection VulnerabilityCVE-2021-42258 · bqe · billquick web suite · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 74.4%Oct 22, 2021
Critical9.8SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityCVE-2021-20028 · sonicwall · sma 210 firmware · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 30.1%Aug 4, 2021