SQL Injection

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. SendGrid for WordPress <= 1.4 - SQL InjectionCVE-2024-43965Smackcoders · CVSS 8.2 · 2.0% likely

   CWE-89

2. The wp-ultimate-exporter plugin through 1.1 for WordPress has SQL injection via the export_type_name parameter.CVE-2016-11000Smackcoders · 2.1% likely

   CWE-89

3. Import all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLiCVE-2022-3243Smackcoders · CVSS 7.2 · 1.3% likely

   CWE-89

4. Visual Email Designer for WooCommerce < 1.7.2 - Multiple Author+ SQLiCVE-2022-3860Smackcoders · CVSS 8.8 · 1.0% likely

   CWE-89

5. WordPress Lead Form Data Collection to CRM plugin <= 3.0.1 - SQL Injection vulnerabilityCVE-2025-30810Smackcoders Inc., · CVSS 8.5 · 0.5% likely

   CWE-89

6. WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File NameCVE-2026-1317smackcoders · CVSS 6.5 · 0.3% likely

   CWE-89

7. WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerabilityCVE-2026-45440Smackcoders Inc. · CVSS 7.6 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.