SQL Injection

Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Dokan Pro <= 3.10.3 - SQL InjectionCVE-2024-3922wedevs · CVSS 10 · 53% likely

   CWE-89

2. WP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site ScriptingCVE-2021-25076Wedevs · 17% likely

   CWE-89

3. WP ERP < 1.12.4 - Admin+ SQL InjectionCVE-2023-2744Wedevs · 2.6% likely

   CWE-89

4. WP ERP <= 1.12.9 - Authenticated (Accounting Manager+) SQL Injection via idCVE-2024-0952wedevs · CVSS 7.2 · 0.9% likely

   CWE-89

5. WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (AccountingManager+) SQL InjectionCVE-2024-1173wedevs · CVSS 7.2 · 0.8% likely

   CWE-89

6. WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL InjectionCVE-2023-34383weDevs · CVSS 8.5 · 0.7% likely

   CWE-89

7. WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL InjectionCVE-2024-0913wedevs · CVSS 7.2 · 0.6% likely

   CWE-89

8. WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL InjectionCVE-2024-21747weDevs · CVSS 7.6 · 0.6% likely

   CWE-89

9. WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL InjectionCVE-2023-26525weDevs · CVSS 7.1 · 0.6% likely

   CWE-89

10. ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' ParameterCVE-2026-11421wedevs · CVSS 6.5 · 0.6% likely

    CWE-89

11. WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.13.1 - Authenticated (Subscriber+) SQL InjectionCVE-2024-0608wedevs · CVSS 6.5 · 0.5% likely

    CWE-89

12. WP ERP <= 1.13.0 - Authenticated (AccountingManager+) SQL InjectionCVE-2024-0956wedevs · CVSS 4.9 · 0.5% likely

    CWE-89

13. WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_idCVE-2024-6666wedevs · CVSS 8.8 · 0.5% likely

    CWE-89

14. SQL Injection in WordPress Project Manager PluginCVE-2024-12015WeDevs · CVSS 7.7 · 0.5% likely

    CWE-89

15. Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' ParametersCVE-2026-12077wedevs · CVSS 7.5 · 0.5% likely

    CWE-89

16. ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support <= 1.17.5 - Authenticated (HR Manager+) SQL Injection via 'orderby' ParameterCVE-2026-13011wedevs · CVSS 6.5 · 0.5% likely

    CWE-89

17. WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL InjectionCVE-2024-12195wedevs · CVSS 6.5 · 0.4% likely

    CWE-89

18. WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerabilityCVE-2024-38693weDevs · CVSS 7.6 · 0.4% likely

    CWE-89

19. WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby ParameterCVE-2024-13500wedevs · CVSS 6.5 · 0.4% likely

    CWE-89

20. WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL InjectionCVE-2026-78470wedevs · CVSS 6.5 · 0.4% likely

    CWE-89

21. Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' ParameterCVE-2026-12079wedevs · CVSS 6.5 · 0.4% likely

    CWE-89

22. WordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerabilityCVE-2025-39377weDevs · CVSS 8.5 · 0.3% likely

    CWE-89

23. WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerabilityCVE-2026-31917weDevs · CVSS 8.5 · 0.3% likely

    CWE-89

24. WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'CVE-2025-8994wedevs · CVSS 6.5 · 0.3% likely

    CWE-89

25. WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' ParameterCVE-2026-4834weDevs · CVSS 7.5 · 0.3% likely

    CWE-89

26. WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerabilityCVE-2026-96346weDevs · CVSS 7.6 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.