SQL Injection

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL InjectionCVE-2023-2607themeisle · CVSS 7.2 · 0.8% likely

   CWE-89

2. RSS Aggregator by Feedzy <= 4.4.2 - Authenticated(Contributor+) SQL InjectionCVE-2024-1317themeisle · CVSS 8.8 · 0.7% likely

   CWE-89

3. WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL InjectionCVE-2023-33927Themeisle · CVSS 7.6 · 0.7% likely

   CWE-89

4. PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL InjectionCVE-2025-11691themeisle · CVSS 7.5 · 0.5% likely

   CWE-89

5. MPG <= 4.2.1 - Unauthenticated SQL Injection via URL PathCVE-2026-85198themeisle · CVSS 6.5 · 0.5% likely

   CWE-89

6. WordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.7 - SQL Injection vulnerabilityCVE-2024-47325Themeisle · CVSS 8.5 · 0.5% likely

   CWE-89

7. WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerabilityCVE-2024-35736Themeisle · CVSS 8.5 · 0.4% likely

   CWE-89

8. WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerabilityCVE-2026-65526Themeisle · CVSS 8.5 · 0.4% likely

   CWE-89

9. WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection VulnerabilityCVE-2025-58789Themeisle · CVSS 7.6 · 0.4% likely

   CWE-89

10. Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL InjectionCVE-2025-9322themeisle · CVSS 7.5 · 0.3% likely

    CWE-89

11. Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL InjectionCVE-2025-12483themeisle · CVSS 6.5 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.