Retour à la veille
CVE-2026-12512
Description détaillée
The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.
Références et Patchs
Dernières Vulnérabilités
CVE-2026-57832
The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.
VOIR DÉTAILS
CVE-2026-57831
The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.
VOIR DÉTAILS
CVE-2026-15804
The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data.
VOIR DÉTAILS