Vulnerabilities > Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-02-12 CVE-2025-1191 SQL Injection vulnerability in Janobe Multi Restaurant Table Reservation System 1.0
A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0 and classified as critical.
network
low complexity
janobe CWE-89
8.8
2025-02-12 CVE-2025-1192 SQL Injection vulnerability in Janobe Multi Restaurant Table Reservation System 1.0
A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0.
network
low complexity
janobe CWE-89
8.8
2025-02-12 CVE-2024-13475 SQL Injection vulnerability in Enituretechnology Small Package Quotes
The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
enituretechnology CWE-89
7.5
2025-02-12 CVE-2024-13490 SQL Injection vulnerability in Enituretechnology LTL Freight Quotes
The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
enituretechnology CWE-89
7.5
2025-02-12 CVE-2024-13531 SQL Injection vulnerability in Enituretechnology Shipengine Shipping Quotes
The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
enituretechnology CWE-89
7.5
2025-02-12 CVE-2025-1189 SQL Injection vulnerability in 1000Projects Attendance Tracking Management System 1.0
A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0.
network
low complexity
1000projects CWE-89
8.8
2025-02-03 CVE-2025-24901 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
8.8
2025-02-03 CVE-2025-24902 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
8.8
2025-02-03 CVE-2025-24905 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
critical
9.8
2025-02-03 CVE-2025-24906 SQL Injection vulnerability in Wegia
WeGIA is a Web Manager for Charitable Institutions.
network
low complexity
wegia CWE-89
critical
9.8