SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpointCVE-2023-5674Wpvibes · 11% likely

   CWE-89

2. Form Vibes < 1.4.5 - Admin+ SQLiCVE-2022-3764Wpvibes · CVSS 7.2 · 1.0% likely

   CWE-89

3. WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL InjectionCVE-2023-47530WPVibes · CVSS 7.6 · 0.7% likely

   CWE-89

4. WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs endpointCVE-2023-5645Wpvibes · 0.7% likely

   CWE-89

5. Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_dataCVE-2024-5325wpvibes · CVSS 8.8 · 0.5% likely

   CWE-89

6. Dynific Addons for Elementor (formerly Anywhere Elementor) <= 1.3 - Authenticated (Subscriber+) SQL Injection via 'q' ParameterCVE-2026-103914wpvibes · CVSS 6.5 · 0.3% likely

   CWE-89

7. WordPress AnyWhere Elementor plugin <= 1.3.0 - SQL Injection vulnerabilityCVE-2026-114189WPVibes · CVSS 8.5 · 0.3% likely

   CWE-89

8. Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL InjectionCVE-2025-13409wpvibes · CVSS 4.9 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.