Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) — Vulnerability Class 8832

8832 vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-32433 WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability — CP Contact Form with Paypal 9.8 -2026-03-13
CVE-2026-32422 WordPress WP EasyCart plugin <= 5.8.13 - SQL Injection vulnerability — WP EasyCart 9.8 -2026-03-13
CVE-2026-32418 WordPress Meow Gallery plugin <= 5.4.4 - SQL Injection vulnerability — Meow Gallery 9.8 -2026-03-13
CVE-2026-32399 WordPress Media LIbrary Assistant plugin <= 3.32 - SQL Injection vulnerability — Media LIbrary Assistant 9.8 -2026-03-13
CVE-2026-32368 WordPress Geo to Lat plugin <= 1.0.19 - SQL Injection vulnerability — Geo to Lat 9.8 -2026-03-13
CVE-2026-32366 WordPress Collapsing Categories plugin <= 3.0.9 - SQL Injection vulnerability — Collapsing Categories 9.8 -2026-03-13
CVE-2026-32365 WordPress Collapsing Archives plugin <= 3.0.7 - SQL Injection vulnerability — Collapsing Archives 9.8 -2026-03-13
CVE-2026-32358 WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability — Booking Calendar 9.8 -2026-03-13
CVE-2026-31922 WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerability — Fox LMS 9.8 -2026-03-13
CVE-2026-31917 WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability — WP ERP 9.8 -2026-03-13
CVE-2026-22193 wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions() — wpDiscuz 8.1 High2026-03-13
CVE-2026-32306 OneUptime ClickHouse SQL Injection via Aggregate Query Parameters — oneuptime 10.0 Critical2026-03-12
CVE-2026-25076 Anchore Enterprise GraphQL Reports API SQL injection — Anchore Enterprise 7.3 High2026-03-12
CVE-2026-32137 DataEase SQL Injection Vulnerability — dataease 9.8AICriticalAI2026-03-12
CVE-2026-21708 Veeam Backup And Replication 安全漏洞 — Backup and Replication 8.8AIHighAI2026-03-12
CVE-2019-25543 Netartmedia Real Estate Portal 5.0 SQL Injection via index.php — Netartmedia Real Estate Portal 8.2 High2026-03-12
CVE-2019-25542 Netartmedia Real Estate Portal 5.0 SQL Injection via index.php — Netartmedia Real Estate Portal 8.2 High2026-03-12
CVE-2019-25541 Netartmedia PHP Mall 4.1 Multiple SQL Injection — Netartmedia PHP Mall 8.2 High2026-03-12
CVE-2019-25540 Netartmedia PHP Mall 4.1 Multiple SQL Injection — Netartmedia PHP Mall 8.2 High2026-03-12
CVE-2019-25539 202CMS v10 beta SQL Injection via register.php — 202CMS 8.2 High2026-03-12
CVE-2019-25538 202CMS v10 beta SQL Injection via log_user Parameter — 202CMS 8.2 High2026-03-12
CVE-2019-25537 Netartmedia Event Portal 2.0 SQL Injection via loginaction.php — Netartmedia Event Portal 8.2 High2026-03-12
CVE-2019-25535 Netartmedia PHP Dating Site SQL Injection via loginaction.php — Netartmedia Php Dating Site 8.2 High2026-03-12
CVE-2019-25536 Netartmedia PHP Real Estate Agency 4.0 SQL Injection via features parameter — Netartmedia PHP Real Estate Agency 8.2 High2026-03-12
CVE-2019-25534 Netartmedia PHP Car Dealer SQL Injection via features parameter — Netartmedia PHP Car Dealer 8.2 High2026-03-12
CVE-2019-25533 Netartmedia PHP Business Directory 4.2 SQL Injection via loginaction.php — Netartmedia PHP Business Directory 8.2 High2026-03-12
CVE-2019-25532 Netartmedia Jobs Portal 6.1 SQL Injection via loginaction.php — Netartmedia Jobs Portal 8.2 High2026-03-12
CVE-2019-25531 Netartmedia Deals Portal Lastest SQL Injection via loginaction.php — Netartmedia Deals Portal 8.2 High2026-03-12
CVE-2019-25530 uHotelBooking System Lastest SQL Injection via system_page Parameter — uHotelBooking System 8.2 High2026-03-12
CVE-2019-25529 Placeto CMS Alpha rv.4 SQL Injection via page Parameter — Placeto CMS 7.1 High2026-03-12

Vulnerabilities classified as CWE-89 (SQL命令中使用的特殊元素转义处理不恰当(SQL注入)) represent 8832 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.