Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-01-13 CVE-2025-0409 SQL Injection vulnerability in Liujianview Gymxmjpa 1.0
A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0.
network
low complexity
liujianview CWE-89
8.8
8.8
2025-01-13 CVE-2025-0410 SQL Injection vulnerability in Liujianview Gymxmjpa 1.0
A vulnerability classified as critical was found in liujianview gymxmjpa 1.0.
network
low complexity
liujianview CWE-89
8.8
8.8
2025-01-13 CVE-2025-0406 SQL Injection vulnerability in Liujianview Gymxmjpa 1.0
A vulnerability was found in liujianview gymxmjpa 1.0.
network
low complexity
liujianview CWE-89
8.8
8.8
2025-01-13 CVE-2025-0407 SQL Injection vulnerability in Liujianview Gymxmjpa 1.0
A vulnerability was found in liujianview gymxmjpa 1.0.
network
low complexity
liujianview CWE-89
8.8
8.8
2025-01-13 CVE-2025-0408 SQL Injection vulnerability in Liujianview Gymxmjpa 1.0
A vulnerability was found in liujianview gymxmjpa 1.0.
network
low complexity
liujianview CWE-89
8.8
8.8
2025-01-13 CVE-2025-0405 SQL Injection vulnerability in Liujianview Gymxmjpa 1.0
A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical.
network
low complexity
liujianview CWE-89
8.8
8.8
2025-01-11 CVE-2024-12404 The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
7.5
7.5
2025-01-10 CVE-2024-12473 The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
6.5
6.5
2025-01-09 CVE-2024-12067 The WP Travel – Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to SQL Injection via the 'booking_itinerary' parameter of the 'wptravel_get_booking_data' function in all versions up to, and including, 10.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
6.5
6.5
2025-01-09 CVE-2025-0347 SQL Injection vulnerability in Anisha Admission Management System 1.0
A vulnerability was found in code-projects Admission Management System 1.0.
network
low complexity
anisha CWE-89
critical
 9.8
9.8