Vulnerabilities
Oracle E-Business Suite TCF Servlet SQL Injection Allows Remote Code Execution
Unauthenticated attackers can exploit CVE-2026-101767 to run code on EBS servers. Oracle released a patch in October 2026.
SQL Injection
Everything Vuln Post has reported about SQL Injection: 7 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
WordPress Green Popups 7.6.3 Fixes Critical Blind SQL Injection CVE-2026-94388
WordPress sites using halfdata Green Popups must update to version 7.6.3 to fix a critical blind SQL injection flaw.
Vulnerabilities
SQL Injection in CP Multi View Event Calendar Affects WordPress Sites
A high-severity SQL injection flaw in the CP Multi View Event Calendar plugin affects versions through 1.4.41, with no confirmed patch status in the record.
Vulnerabilities
WeGIA SQLi CVE-2026-55683: 3.8.6 Stops Remote Attackers From Manipulating Credentials and Billing Data
LabRedesCefetRJ WeGIA 3.8.6 patches a critical flaw allowing remote attackers to manipulate billing data and credentials via unsanitized inputs.
Vulnerabilities
WeGIA Critical SQL Injection CVE-2026-55684 Fixed in 3.8.6 Update for Charity Management App
LabRedesCefetRJ released version 3.8.6 to fix CVE-2026-55684, a CVSS 9.8 critical SQL injection vulnerability in the WeGIA charity management web application that allowed remote attackers to manipulate database records without authentication.
Vulnerabilities
phpMyFAQ Autocomplete SQLi Leak Config Secrets via Unicode Input
A critical SQL injection flaw in phpMyFAQ allows unauthenticated attackers to access database credentials and configuration secrets via the autocomplete search feature.
Vulnerabilities
Tickera Plugin: Critical Blind SQL Injection in v3.6.0.6 Risks Database Access
Security researchers identified a critical blind SQL injection flaw in Tickera versions up to 3.6.0.6, risking unauthorized database access and data exposure.