CWE-89 · weakness in SQL Injection
SQL Injection
21,716 CVEs · 32 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 32
- check available
- 479
- likely to be exploited
- 394
Every one of the 21,716 is a mark on the map. Named now: 157 to 182, most at risk first.
- Hospital Management System 4.0 - SQL Injection
- Prestashop Blockwishlist 2.1.0 SQL Injection
- WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection
- Cyber Cafe Management System 1.0 - SQL Injection
- Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection
- Magento - SQL Injection
- ImpressCMS < 1.4.3 - SQL Injection
- Simple Task Managing System v1.0 - SQL Injection
- F-logic DataCube3 - SQL Injection
- Dairy Farm Shop Management System 1.0 - SQL Injection
- Directory Management System 1.0 - SQL Injection
- WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass
- E-Learning System 1.0 - SQL Injection
- PrestaShop 1.7.7.0 - SQL Injection
- IPeakCMS 3.5 - SQL Injection
- WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection
- NS-ASG Application Security Gateway 6.3 - Sql Injection
- CSE Bookstore 1.0 - SQL Injection
- OpenSIS 7.3 - SQL Injection
- Download Monitor < 4.4.5 - SQL Injection
- WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection
- PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection
- Chamilo model.ajax.php - SQL Injection
- Online Event Booking and Reservation System 2.3.0 - SQL Injection
- NEX-Forms Plugin < 7.9.7 - SQL Injection
- PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.