CWE-89 · weakness in SQL Injection
SQL Injection
21,716 CVEs · 32 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 32
- check available
- 479
- likely to be exploited
- 394
Every one of the 21,716 is a mark on the map. Named now: 183 to 208, most at risk first.
- Joomla! Component Canteen 1.0 - Local File Inclusion
- wpDiscuz <= 5.3.5 - SQL Injection
- Infographic Maker iList < 4.3.8 - SQL Injection
- WordPress Page Views Count <2.4.15 - SQL Injection
- WordPress Car Seller - Auto Classifieds Script - SQL Injection
- Microfinance Management System 1.0 - SQL Injection
- PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection
- KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection
- Wordpress Country State City Dropdown <=2.7.2 - SQL Injection
- Windmill < 1.603.3 - SQL Injection
- WordPress ARPrice <3.6.1 - SQL Injection
- DedeCMS 5.7 - SQL Injection
- CentOS Web Panel - SQL Injection
- WordPress KiviCare <2.3.9 - SQL Injection
- Subrion CMS <4.1.5.10 - SQL Injection
- WordPress Nirweb Support <2.8.2 - SQL Injection
- Shopware < 6.5.8.13 - SQL Injection
- WordPress RSVPMaker <=9.3.2 - SQL Injection
- Django RasterField - SQL Injection
- WordPress Asgaros Forum <1.15.13 - SQL Injection
- JeecgBoot 3.5.0 - SQL Injection
- Doctor Appointment System 1.0 - SQL Injection
- PrestaShop Product Comments <4.2.0 - SQL Injection
- ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection
- Void Aural Rec Monitor 9.0.0.1 - SQL Injection
- Metinfo 7.0.0 beta - SQL Injection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.