CVE-2023-26015

WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Chris Richardson MapPress Maps for WordPress mappress-google-maps-for-wordpress allows SQL Injection.This issue affects MapPress Maps for WordPress: from n/a through 2.85.4.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Mappresspro

Products

Mappress

CVE-2023-26003

WordPress WP Post Corrector <= 1.0.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP Post Corrector allows SQL Injection. This issue affects WP Post Corrector: from n/a through 1.0.2.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

—

Products

—

CVE-2023-25990

WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2023-25800

WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.2.0.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2023-25700

WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.1.10.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Themeum

Products

Tutor Lms

CVE-2023-25047

WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Carrcommunications

Products

Rsvpmaker

CVE-2023-24000

WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through 2.5.7.

CVSS 3.1 · 8.2 High EPSS 2.5% KEV · Not listed

Vendors

Gamipress

Products

Gamipress

CVE-2022-47588

WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tips and Tricks HQ, Peter Petreski Simple Photo Gallery simple-photo-gallery allows SQL Injection.This issue affects Simple Photo Gallery: from n/a through v1.8.1.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Tipsandtricks-hq

Products

Simple Photo Gallery

CVE-2022-47445

WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Web-x

Products

Be-popia-compliant Be Popia Compliant

CVE-2022-47432

WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB allows SQL Injection.This issue affects Shortcode IMDB: from n/a through 6.0.8.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Kemalyazici

Products

Shortcode Imdb

CVE-2022-47430

WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Weblizar

Products

School Management - Education \& Learning Management

CVE-2022-47428

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Wpdevart

Products

Booking Calendar

CVE-2022-47426

WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Neshan Maps Platform Neshan Maps neshan-maps allows SQL Injection.This issue affects Neshan Maps: from n/a through 1.1.4.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed

Vendors

Neshan

Products

Neshan Maps

CVE-2022-47420

WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Adaplugin Online Ada

Products

Accessibility Suite By Online Ada Accessibility Suite By Online Ada

CVE-2022-46860

WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL Injection.This issue affects Short URL: from n/a through 1.6.4.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Kaizencoders

Products

Short Url

CVE-2022-46859

WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.1.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Spiffyplugins

Products

Spiffy Calendar

CVE-2022-46818

WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopi Ramasamy Email posts to subscribers allows SQL Injection.This issue affects Email posts to subscribers: from n/a through 6.2.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Gopiplus

Products

Email Posts To Subscribers

CVE-2022-46808

WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Reputeinfosystems

Products

Armember

CVE-2022-45805

WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3.

CVSS 3.1 · 8.2 High EPSS 2.3% KEV · Not listed

Vendors

Paytm

Products

Payment Gateway

CVE-2022-45373

WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Wp-slimstat

Products

Slimstat Analytics