Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.501 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: SQL Injection

Displaying 1 - 25 results out of 1141

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
WP Fast Total Search <= 1.80.280 - Unauthenticated Time-Based Blind SQL Injection CVE-2026-12741	Network Scanner	Oct 15, 2026	High(7.5)	0.02	0.76	No
GeoServer jsonArrayContains CQL Filter - SQL Injection CVE-2026-76904	Network Scanner	Oct 14, 2026	Critical(9.8)	0.04	0.91	No
Asgaros Forum < 3.2.0 - SQL Injection CVE-2025-11452	Network Scanner	Sep 24, 2026	High(7.5)	0.02	0.71	No
SiYuan <=3.7.2 - SQL Injection CVE-2026-69085	Network Scanner	Sep 18, 2026	Critical(10)	0.02	0.74	No
cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection CVE-2026-59509	Network Scanner	Sep 15, 2026	Critical(9.2)	0.02	0.73	No
VidShop for WooCommerce <= 1.1.4 - SQL Injection CVE-2026-0702	Network Scanner	Sep 10, 2026	High(7.5)	0.02	0.75	No
AcyMailing < 10.11.1 - Unauthenticated SQL Injection CVE-2026-56292	Network Scanner	Sep 8, 2026	High(7.5)	0.02	0.72	No
ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection CVE-2026-21875	Network Scanner	Sep 7, 2026	Critical(9.8)	0.02	0.78	No
mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE CVE-2025-51683	Network Scanner	Sep 2, 2026	Critical(9.8)	0.02	0.81	No
Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection CVE-2026-9586	Network Scanner	Sep 2, 2026	Critical(9.8)	0.19	0.98	No
Joomla Easy Store - SQL Injection CVE-2026-65761	Network Scanner	Aug 27, 2026	Critical(9.8)	0.02	0.64	No
Photo Gallery WordPress v1.6.3 - SQL Injection CVE-2022-1281	Network Scanner	Aug 20, 2026	Critical(9.8)	0.44	0.99	No
SiYuan - SQL Execution CVE-2026-69084	Network Scanner	Aug 18, 2026	Critical(10)	0.02	0.76	No
Geo Mashup <= 1.13.18 - SQL Injection CVE-2026-4060	Network Scanner	Aug 18, 2026	High(7.5)	0.02	0.76	No
My Calendar < 3.7.9 - Unauthenticated SQL Injection CVE-2026-6854	Network Scanner	Aug 17, 2026	High(7.5)	0.02	0.76	No
GLPI - Blind SQL Injection in History Log Filter (LogBleed) CVE-2026-53629	Network Scanner	Aug 13, 2026	High(8.8)	0.02	0.63	No
Metabase - Unauthenticated SQL Injection CVE-2026-72898	Network Scanner	Aug 12, 2026	Critical(10)	0.98	1	No
Windmill < 1.603.3 - SQL Injection CVE-2026-23696	Network Scanner	Jul 23, 2026	Critical(9.9)	0.14	0.97	No
YMC Filter - SQL Injection CVE-2026-54836	Network Scanner	Jul 21, 2026	Critical(9.3)	0.02	0.71	No
wp2shell - WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.11	0.96	No
wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.11	0.96	Yes
XStore Theme < 9.7.3 - SQL Injection CVE-2026-3326	Network Scanner	Jul 14, 2026	High(8.6)	0.02	0.75	No
MISP < 2.5.37 - SQL Injection CVE-2026-44381	Network Scanner	Jun 29, 2026	Medium(5.3)	0.01	0.55	No
Weaver E-cology9 api/doc/out/more/list SQL Injection	Network Scanner	Jun 25, 2026	High	N/A	N/A	No
phpMyFAQ <= 4.1.1 - SQL Injection CVE-2026-46364	Network Scanner	Jun 11, 2026	Critical(9.8)	0.03	0.82	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove