cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 178

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 6.5CVE-2026-66434EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.

  2. 6.5CVE-2026-66433EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions.

  3. 7.6CVE-2026-66427EPSS 0.4%

    Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.

  4. 5.9CVE-2026-65563EPSS 0.2%

    Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions.

  5. 6.5CVE-2026-65562EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions.

  6. 6.5CVE-2026-65561EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.

  7. 5.9CVE-2026-65557EPSS 0.2%

    Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.

  8. 6.5CVE-2026-59559EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.

  9. 7.1CVE-2026-59558EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.

  10. 7.1CVE-2026-59556EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions.

  11. 7.1CVE-2026-59553EPSS 0.3%

    Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.

  12. 8.5CVE-2026-59551EPSS 0.4%

    Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

  13. 9.3CVE-2026-59550EPSS 0.4%

    Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.

  14. 9.3CVE-2026-59549EPSS 0.4%

    Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.

  15. 9.3CVE-2026-59538EPSS 0.4%

    Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.

  16. 7.6CVE-2026-59537EPSS 0.4%

    Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.

  17. 9.3CVE-2026-59533EPSS 0.4%

    Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions.

  18. 9.3CVE-2026-59527EPSS 0.4%

    Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

  19. 8.5CVE-2025-59172EPSS 0.3%

    Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root.

  20. 8.2CVE-2026-65877EPSS 0.4%

    Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various parameters in the media manager search and date filters lead to an SQL injection vector.

  21. 9.2CVE-2026-65876EPSS 0.4%

    Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an SQL injection vector.

  22. 9.2CVE-2026-65766EPSS 0.4%

    Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector.

  23. 9.3CVE-2026-61511ExploitEPSS 5.6%

    vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP cod…

  24. 8.4CVE-2026-59688EPSS 1.7%

    An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system comm…

  25. 8.4CVE-2026-59687EPSS 1.7%

    An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system comm…

  26. 8.4CVE-2026-59686EPSS 1.7%

    An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system comm…

  27. 6.3CVE-2026-14856EPSS 0.4%

    A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can …

  28. 5.1CVE-2026-65764EPSS 0.4%

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability.

  29. 6.8CVE-2026-14827EPSS 0.4%

    The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript…

  30. 9.0CVE-2026-14289EPSS 0.7%

    The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whose only protection is derived from a cryptographic key that is empty in the default, unconfigured state, allow…

  31. 4.8CVE-2026-14203EPSS 0.2%

    The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes…

  32. 6.1CVE-2026-14190EPSS 0.3%

    The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated atta…

  33. 3.8CVE-2026-14189EPSS 0.3%

    The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to perform SQL injection that executes when a visitor triggers…

  34. 7.1CVE-2026-13726EPSS 0.3%

    The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send…

  35. 6.1CVE-2026-13400EPSS 0.3%

    Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.12.2. The root cause is a sanitization-ordering defect: the rendered notification content is decoded back int…

  36. 6.1CVE-2026-12982EPSS 0.3%

    The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability whic…

  37. 6.1CVE-2026-10082EPSS 0.3%

    The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it in the page, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the …

  38. 8.2CVE-2026-15928EPSS 0.3%

    XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

  39. 8.3CVE-2026-17497EPSS 0.7%

    NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript running in the application webview can therefore invo…

  40. 8.1CVE-2026-17496EPSS 0.5%

    NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview, without HTML sanitization and with CSP set to null. Attacker-contro…

  41. 7.5CVE-2026-63720EPSS 0.7%

    datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded new…

  42. 7.1CVE-2026-64379EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode S…

  43. 7.8CVE-2026-64330EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() In svdm_consume_modes(), the SVID value is read from pmdata->svids using pmdata->svid_index as an array ind…

  44. 7.8CVE-2026-64324EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udf_free_blocks() checks the logical block number and count against the partition length, but drops the ext…

  45. 7.8CVE-2026-64273EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-feedback effect index iforce_process_packet() handles a status report (packet id 0x02) by taking a force-feedback effect …

  46. 7.8CVE-2026-64272EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When __mms114_read_…

  47. 7.8CVE-2026-64271EPSS 0.2%

    In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on every complete packet tw_interrupt() accumulates each non-zero serial byte into a fixed three-byte buffer with a running inde…

  48. 9.8CVE-2026-16766EPSS 2.6%

    Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-cont…

  49. 6.4CVE-2026-15425EPSS 0.3%

    The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Post Slug (post_name) in all versions up to, and including, 28.0 due to insufficient input sanitizat…

  50. 8.5CVE-2025-71408EPSS 0.3%

    NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.p…