SQL Injection

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. WordPress ARPrice <3.6.1 - SQL InjectionCVE-2022-0867Reputeinfosystems · 13% likely

   CWE-89

2. BookingPress < 1.0.11 - Unauthenticated SQL InjectionCVE-2022-0739Reputeinfosystems · 37% likely

   CWE-89

3. WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionCVE-2022-46808Repute Infosystems · CVSS 8.2 · 0.6% likely

   CWE-89

4. Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL InjectionCVE-2024-10540reputeinfosystems · CVSS 5.3 · 0.6% likely

   CWE-89

5. WordPress ARForms plugin <= 6.4 - Subscriber+ SQL Injection vulnerabilityCVE-2024-32706reputeinfosystems · CVSS 8.5 · 0.6% likely

   CWE-89

6. WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL InjectionCVE-2023-50841Repute Infosystems · CVSS 8.5 · 0.5% likely

   CWE-89

7. Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL InjectionCVE-2024-11726reputeinfosystems · CVSS 6.5 · 0.5% likely

   CWE-89

8. BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' ParameterCVE-2026-11823Repute Infosystems · CVSS 7.5 · 0.5% likely

   CWE-89

9. WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerabilityCVE-2026-68566Repute Infosystems · CVSS 9.3 · 0.4% likely

   CWE-89

10. WordPress Social Share And Social Locker plugin <= 1.4.2 - SQL Injection vulnerabilityCVE-2025-31911reputeinfosystems · CVSS 9.3 · 0.4% likely

    CWE-89

11. WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerabilityCVE-2025-31910reputeinfosystems · CVSS 7.6 · 0.4% likely

    CWE-89

12. WordPress ARPrice plugin <= 4.1.3 - SQL Injection vulnerabilityCVE-2024-49666reputeinfosystems · CVSS 8.5 · 0.4% likely

    CWE-89

13. WordPress ARPrice plugin <= 4.1.3 - Unauthenticated SQL Injection vulnerabilityCVE-2024-49655reputeinfosystems · CVSS 9.3 · 0.4% likely

    CWE-89

14. ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' ParameterCVE-2026-7649reputeinfosystems · CVSS 7.5 · 0.3% likely

    CWE-89

15. WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerabilityCVE-2026-42417reputeinfosystems · CVSS 9.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.