CVE Vulnerability

CWE-89

CVE-2019-15872

by

The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.

CVE-2019-15658

by

connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data.

CVE-2019-15659

by

The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969.

CVE-2019-15622

by

Not strictly enough sanitization in the Nextcloud Android app 3.6.0 allowed an attacker to get content information from protected tables when using custom queries.

CVE-2019-15646

by

The rsvpmaker plugin before 6.2 for WordPress has SQL injection.

CVE-2019-15574

by

Gesior-AAC before 2019-05-01 allows serviceID SQL injection in accountmanagement.php.