Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE	CVE	VULNERABILITY TITLE	RISK
2025-05-13	CVE-2024-51444	A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). network low complexity CWE-89	6.5
2025-05-13	CVE-2025-26390	A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). network low complexity CWE-89 critical	9.8
2025-05-13	CVE-2025-3107	The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby' parameter in all versions up to, and including, 4.9.9.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. network low complexity CWE-89	6.5
2025-05-13	CVE-2025-4396	The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. network low complexity CWE-89	7.5
2025-05-13	CVE-2023-49641	Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. network low complexity CWE-89 critical	9.8
2025-05-06	CVE-2025-0853	The PGS Core plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'save_header_builder' function in all versions up to, and including, 5.8.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. network low complexity CWE-89	7.5
2025-05-06	CVE-2025-4358	SQL Injection vulnerability in PHPgurukul Company Visitor Management System 2.0 A vulnerability classified as critical has been found in PHPGurukul Company Visitor Management System 2.0. network low complexity phpgurukul CWE-89 critical	9.8
2025-05-06	CVE-2025-40620	SQL Injection vulnerability in Tcman GIM 11.0 SQL injection in TCMAN's GIM v11. network low complexity tcman CWE-89 critical	9.8
2025-05-06	CVE-2025-40621	SQL Injection vulnerability in Tcman GIM 11.0 SQL injection in TCMAN's GIM v11. network low complexity tcman CWE-89 critical	9.8
2025-05-06	CVE-2025-40622	SQL Injection vulnerability in Tcman GIM 11.0 SQL injection in TCMAN's GIM v11. network low complexity tcman CWE-89 critical	9.8