Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.297 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: SQL Injection

Displaying 1 - 25 results out of 1130

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
SiYuan - SQL Execution CVE-2026-69084	Network Scanner	Aug 18, 2026	Critical(10)	0.01	0.22	No
Geo Mashup <= 1.13.18 - SQL Injection CVE-2026-4060	Network Scanner	Aug 18, 2026	High(7.5)	0.01	0.24	No
GeoServer jsonArrayContains CQL Filter - SQL Injection CVE-2023-25157	Network Scanner	Aug 17, 2026	Critical(9.8)	0.86	1	No
My Calendar < 3.7.9 - Unauthenticated SQL Injection CVE-2026-6854	Network Scanner	Aug 17, 2026	High(7.5)	0.01	0.59	No
GLPI - Blind SQL Injection in History Log Filter (LogBleed) CVE-2026-53629	Network Scanner	Aug 13, 2026	High(8.8)	N/A	N/A	No
Metabase - Unauthenticated SQL Injection CVE-2026-72898	Network Scanner	Aug 12, 2026	Critical(10)	0.11	0.96	No
Windmill < 1.603.3 - SQL Injection CVE-2026-23696	Network Scanner	Jul 23, 2026	Critical(9.9)	0.17	0.97	No
YMC Filter - SQL Injection CVE-2026-54836	Network Scanner	Jul 21, 2026	Critical(9.3)	0.02	0.62	No
wp2shell - WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.96	1	No
wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.96	1	Yes
XStore Theme < 9.7.3 - SQL Injection CVE-2026-3326	Network Scanner	Jul 14, 2026	High(8.6)	0.02	0.78	No
MISP < 2.5.37 - SQL Injection CVE-2026-44381	Network Scanner	Jun 29, 2026	Medium(5.3)	0.01	0.49	No
Weaver E-cology9 api/doc/out/more/list SQL Injection	Network Scanner	Jun 25, 2026	High	N/A	N/A	No
WordPress Newsletters <= 4.13 - Unauthenticated SQL Injection CVE-2026-3018	Network Scanner	Jun 11, 2026	High(7.5)	0.02	0.7	No
phpMyFAQ <= 4.1.1 - SQL Injection CVE-2026-46364	Network Scanner	Jun 11, 2026	Critical(9.8)	0.02	0.76	No
dotCMS Core Publish Audit API - Unauthenticated SQL Injection CVE-2026-8054	Network Scanner	Jun 9, 2026	Critical	0.02	0.74	No
WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection CVE-2026-5073	Network Scanner	Jun 9, 2026	High(7.5)	0.02	0.7	No
PrestaShop lgcookieslaw - SQL Injection CVE-2022-44727	Network Scanner	Jun 8, 2026	Critical(9.8)	0.03	0.83	No
E-Learning System 1.0 - SQL Injection CVE-2021-3239	Network Scanner	Jun 3, 2026	Critical(9.8)	0.19	0.97	No
LiteLLM - SQL Injection CVE-2026-42208	Network Scanner	Jun 1, 2026	Critical(9.8)	0.9	1	No
JoomSport <= 5.7.7 - SQL Injection CVE-2026-42647	Network Scanner	Jun 1, 2026	Critical(9.3)	0.02	0.69	No
FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution CVE-2026-6433	Network Scanner	May 27, 2026	Critical(9.8)	0.02	0.66	No
YesWiki < 4.6.4 - Unauthenticated SQL Injection CVE-2026-46670	Network Scanner	May 27, 2026	Critical(9.8)	0.02	0.75	No
Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query CVE-2026-9082	Network Scanner	May 23, 2026	Critical(9.8)	0.89	1	No
Cloudlog - SQL Injection CVE-2024-48259	Network Scanner	May 11, 2026	High(7.3)	0.01	0.57	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove