Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-08-29 CVE-2024-43965 SQL Injection vulnerability in Smackcoders Sendgrid
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4.
network
low complexity
smackcoders CWE-89
critical
9.8
2024-08-29 CVE-2024-8255 Deserialization of Untrusted Data vulnerability in Deltaww DTN Soft
Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability.
network
low complexity
deltaww CWE-502
critical
9.8
2024-08-29 CVE-2024-38795 SQL Injection vulnerability in Cridio Listingpro
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro allows SQL Injection.This issue affects ListingPro: from n/a through 2.9.4.
network
low complexity
cridio CWE-89
critical
9.8
2024-08-29 CVE-2024-39622 SQL Injection vulnerability in Cridio Listingpro
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CridioStudio ListingPro.This issue affects ListingPro: from n/a through 2.9.4.
network
low complexity
cridio CWE-89
critical
9.8
2024-08-29 CVE-2024-39653 SQL Injection vulnerability in E4Jconnect Vikrentcar
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E4J s.R.L.
network
low complexity
e4jconnect CWE-89
critical
9.8
2024-08-29 CVE-2024-43132 SQL Injection vulnerability in Wpwebelite Docket
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPWeb Elite Docket (WooCommerce Collections / Wishlist / Watchlist) allows SQL Injection.This issue affects Docket (WooCommerce Collections / Wishlist / Watchlist): from n/a before 1.7.0.
network
low complexity
wpwebelite CWE-89
critical
9.8
2024-08-29 CVE-2024-43144 SQL Injection vulnerability in Stylemixthemes Cost Calculator Builder
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cost Calculator Builder allows SQL Injection.This issue affects Cost Calculator Builder: from n/a through 3.2.15.
network
low complexity
stylemixthemes CWE-89
critical
9.8
2024-08-29 CVE-2024-43917 SQL Injection vulnerability in Templateinvaders TI Woocommerce Wishlist
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2.
network
low complexity
templateinvaders CWE-89
critical
9.8
2024-08-29 CVE-2024-43918 SQL Injection vulnerability in Woobewoo Product Table
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.
network
low complexity
woobewoo CWE-89
critical
9.8
2024-08-29 CVE-2024-43922 Code Injection vulnerability in Nitropack
Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc.
network
low complexity
nitropack CWE-94
critical
9.8