Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-01-31 CVE-2025-0934 SQL Injection vulnerability in Anisha JOB Recruitment 1.0
A vulnerability was found in code-projects Job Recruitment 1.0.
network
low complexity
anisha CWE-89
7.5
2025-01-30 CVE-2025-0880 SQL Injection vulnerability in Codezips GYM Management System 1.0
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical.
network
low complexity
codezips CWE-89
critical
9.8
2025-01-30 CVE-2025-0881 SQL Injection vulnerability in Codezips GYM Management System 1.0
A vulnerability was found in Codezips Gym Management System 1.0.
network
low complexity
codezips CWE-89
critical
9.8
2025-01-30 CVE-2025-0882 SQL Injection vulnerability in Fabianros Chat System 1.0
A vulnerability was found in code-projects Chat System up to 1.0.
network
low complexity
fabianros CWE-89
7.5
2025-01-30 CVE-2025-0874 SQL Injection vulnerability in Fabianros Simple CAR Rental System 1.0
A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0.
network
low complexity
fabianros CWE-89
critical
9.8
2025-01-30 CVE-2025-0873 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
9.8
2025-01-30 CVE-2025-0872 SQL Injection vulnerability in Angeljudesuarez Tailoring Management System 1.0
A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0.
network
low complexity
angeljudesuarez CWE-89
critical
9.8
2025-01-30 CVE-2024-13596 SQL Injection vulnerability in Modalsurvey Wordpress Survey and Poll
The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to, and including, 1.7.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
modalsurvey CWE-89
6.5
2025-01-30 CVE-2025-0861 SQL Injection vulnerability in Vruiz Vr-Frases
The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 3.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
vruiz CWE-89
7.2
2025-01-30 CVE-2025-0847 SQL Injection vulnerability in 1000Projects Employee Task Management System 1.0
A vulnerability was found in 1000 Projects Employee Task Management System 1.0.
network
low complexity
1000projects CWE-89
critical
9.8