Invicti named a Leader in IDC MarketScape: Worldwide DAST 2026 Vendor Assessment. Read now.
Log in
Invicti Platform
US
EU
CA
AppSec with Zero Noise
Platform
Invicti Platform
Zero-noise AppSec platform
Scan Code
Secure code before runtime
SAST
Early static security analysis
Open Source (SCA)
Find vulnerable dependencies
SBOM & License Risk
Generate SBOMs and track licenses
Secrets
Detect exposed secrets in applications
Infrastructure as Code
Ingest IaC security findings
Container
Track container image vulnerabilities
Test Runtime
Test live applications like attackers
DAST & AI DAST
Test runtime, prove exploitability
Agentic Pentesting
Automate real-world attack techniques
API Security Testing
Discover and test APIs
Attack Surface Management
Identify exposed apps and endpoints
Cloud AppSec
Get a single-pane view of cloud app risk
AI AppSec
Scan smarter, accelerate remediation
Manage Vulnerabilities
See, prioritize, reduce AppSec risk
Vulnerability Management (ASPM)
Centralize and correlate AppSec findings
Compliance & Executive Reporting
Measure risk and impact
Threat Intelligence
Reachability, exploitability, and business logic
Solutions
API Discovery
AI-BOM
Manage Vulnerabilities
Automate Security Workflows
Track AppSec KPIs
Manage Open Source Risk
Pricing
Why Invicti
About Us
Invicti vs. Competitors
Case Studies
Contact Us
Careers
MSSP
Partners
Resources
Resource Library
Blog
Webinars
White Papers
Podcasts
Invicti Learn
Savings Calculator
Live Training
Documentation
Vulnerability Database
Get a demo
Home
/
Web Application Vulnerabilities
/ SQL Injection
Web Application Vulnerabilities
Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise
Acunetix Standard & Premium
v.26.4.2314
SQL Injection
This page lists
838 vulnerabilities
in this category.
Vulnerability Name
CVE
CWE
Severity
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent SQL Injection (6.3.3)
CVE-2022-3494
CWE-89
High
WordPress Plugin GamiPress-The most flexible and powerful gamification for WordPress SQL Injection (2.5.7)
CVE-2023-24000
CWE-89
High
WordPress Plugin Post Form-Registration Form-Profile Form for User Profiles and Content Forms for User Submissions SQL Injection (2.2.7)
CVE-2018-21003
CWE-89
High
WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login SQL Injection (5.0.2.1)
CVE-2022-0420
CWE-89
High
WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login SQL Injection (5.0.1.5)
CVE-2021-24862
CWE-89
High
WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce SQL Injection (1.6.8)
CVE-2023-26325
CWE-89
High
WordPress Plugin WP Coder-add custom html, css and js code SQL Injection (2.5.3)
CVE-2023-0895
CWE-89
High
WordPress Plugin RapidLoad Power-Up for Autoptimize SQL Injection (1.6.35)
CVE-2022-47593
CWE-89
High
WordPress Plugin WordPress WP-Advanced-Search SQL Injection (3.3.5)
-
CWE-89
High
WordPress Plugin WP Data Access SQL Injection (4.3.1)
CVE-2021-24866
CWE-89
High
WordPress Plugin CM Pop-Up banners for WordPress SQL Injection (1.5.10)
CVE-2023-30750
CWE-89
High
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.5.15.727)
CVE-2022-25607
CWE-89
High
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (6.8.1)
CVE-2023-0600
CWE-89
High
WordPress Plugin YARPP-Yet Another Related Posts SQL Injection (5.30.2)
CVE-2023-0579
CWE-89
High
WordPress Plugin LearnDash LMS SQL Injection (4.5.3)
CVE-2023-28777
CWE-89
High
WordPress Plugin WP Reroute Email SQL Injection (1.4.6)
CVE-2023-27605
CWE-89
High
WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (2.9.11)
CVE-2023-0631
CWE-89
High
WordPress Plugin Slimstat Analytics SQL Injection (5.0.4)
CVE-2022-45373
CWE-89
High
WordPress Plugin Slimstat Analytics SQL Injection (4.9.3.3)
-
CWE-89
High
WordPress Plugin Slimstat Analytics SQL Injection (4.9.3.2)
CVE-2023-0630
CWE-89
High
WordPress Plugin AI ChatBot SQL Injection (4.8.9)
CVE-2023-5204
CWE-89
High
WordPress Plugin WP Fastest Cache SQL Injection (1.2.1)
CVE-2023-6063
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.3.1)
CVE-2022-0439
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.4.19)
CVE-2022-3981
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.14)
CVE-2024-2876
CWE-89
High
WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder SQL Injection (1.29.2)
CVE-2024-31077
CWE-89
High
WordPress Plugin LayerSlider SQL Injection (7.10.0)
CVE-2024-2879
CWE-89
High
WordPress Plugin Malware Scanner SQL Injection (4.7.2)
CVE-2024-25902
CWE-89
High
WordPress Plugin MasterStudy LMS-for Online Courses and Education SQL Injection (3.2.5)
CVE-2024-1512
CWE-89
High
WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud SQL Injection (4.10.8)
-
CWE-89
High
WordPress Plugin RegistrationMagic-User Registration with Custom Registration Forms SQL Injection (5.3.1.0)
CVE-2024-1990
CWE-89
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.6.1)
CVE-2024-1751
CWE-89
High
WordPress Plugin Tutor LMS-eLearning and online course solution SQL Injection (2.7.0)
CVE-2024-4318
CWE-89
High
WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership SQL Injection (2.8.2)
CVE-2024-1071
CWE-89
High
WordPress Plugin WordPress Automatic SQL Injection (3.92.0)
CVE-2024-27956
CWE-89
High
WordPress Plugin WP Activity Log Premium SQL Injection (4.6.4)
CVE-2024-2018
CWE-89
High
WordPress Plugin Consulting Elementor Widgets SQL Injection (1.3.0)
CVE-2024-37090
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.2)
CVE-2024-35678
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.0)
CVE-2023-29096
CWE-89
High
WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.1)
CVE-2023-36508
CWE-89
High
WordPress Plugin Country State City Dropdown CF7 SQL Injection (2.7.2)
CVE-2024-3495
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.20)
CVE-2024-4295
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.23)
CVE-2024-5756
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.22)
CVE-2024-4845
CWE-89
High
WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (2.0.3)
CVE-2024-35750
CWE-89
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.26)
CVE-2024-5522
CWE-89
High
WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)
CVE-2024-1061
CWE-89
High
WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes SQL Injection (7.6.2)
CVE-2024-4743
CWE-89
High
WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar SQL Injection (2.8.2)
CVE-2024-1698
CWE-89
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark SQL Injection (2.8.6)
CVE-2023-6620
CWE-89
High
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark SQL Injection (2.9.3)
CVE-2024-5207
CWE-89
High
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (9.0.1)
CVE-2024-3592
CWE-89
High
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator SQL Injection (4.4.2)
CVE-2024-1317
CWE-89
High
WordPress Plugin Themify-WooCommerce Product Filter SQL Injection (1.4.9)
CVE-2024-6027
CWE-89
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) SQL Injection (1.5.109)
CVE-2024-5329
CWE-89
High
WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) SQL Injection (1.5.107)
CVE-2024-4779
CWE-89
High
WordPress Plugin Visualizer:Tables and Charts Manager for WordPress SQL Injection (3.11.1)
CVE-2024-35736
CWE-89
High
WordPress Plugin Web Directory Free SQL Injection (1.6.9)
CVE-2024-3552
CWE-89
High
WordPress Plugin WishList Member X SQL Injection (3.25.1)
CVE-2024-37112
CWE-89
High
WordPress Plugin WP Hotel Booking SQL Injection (2.1.0)
CVE-2024-3605
CWE-89
High
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More SQL Injection (16.26.5)
CVE-2024-32709
CWE-89
High
WordPress Plugin WP TripAdvisor Review Slider SQL Injection (12.6)
CVE-2024-35630
CWE-89
High
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) SQL Injection (6.3.1)
CVE-2024-3820
CWE-89
High
WordPress Plugin wpForo Forum SQL Injection (2.3.3)
CVE-2024-3200
CWE-89
High
WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress SQL Injection (1.2.5)
CVE-2024-4742
CWE-89
High
WordPress Plugin Zoho Marketing Automation SQL Injection (1.2.7)
CVE-2024-37225
CWE-89
High
WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)
CVE-2024-38755
CWE-89
High
WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.25)
CVE-2024-6172
CWE-89
High
WordPress Plugin Form Vibes-Database Manager for Forms SQL Injection (1.4.10)
CVE-2024-5325
CWE-89
High
WordPress Plugin FormLift for Infusionsoft Web Forms SQL Injection (7.5.17)
CVE-2024-38773
CWE-89
High
WordPress Plugin FV Flowplayer Video Player SQL Injection (7.5.46.7212)
CVE-2024-6338
CWE-89
High
WordPress Plugin HUSKY-Products Filter Professional for WooCommerce SQL Injection (1.3.6)
CVE-2024-6457
CWE-89
High
WordPress Plugin OSM-OpenStreetMap SQL Injection (6.0.2)
CVE-2024-3604
CWE-89
High
WordPress Plugin Paid Memberships Pro-Content Restriction, User Registration, & Paid Subscriptions SQL Injection (3.0.5)
CVE-2024-37486
CWE-89
High
WordPress Plugin PayPlus Payment Gateway SQL Injection (6.6.8)
CVE-2024-6205
CWE-89
High
«
1
...
10
11
12
»