CVE ID :CVE-2026-115607 Published : Oct. 28, 2026, 1:17 p.m. | 1 hour, 7 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crowd Favorite DXP ToolKit dxp-toolkit allows SQL Injection.This issue affects DXP ToolKit:...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-115607 - WordPress DXP ToolKit plugin <= 2.0.1 - SQL Injection vulnerability

VERWANDTEARTIKEL

HiRDB: Sechs kritische Schwachstellen erlauben Angriffe ohne Anmeldung

CVE-2026-65145: Kritische Lücke in NVIDIA NeMo Agent Toolkit ermöglicht Angriffe ohne Anmeldung

CVE-2026-115968 - WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

CVE-2026-115603 - WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

CVE-2026-116389 - WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

CVE-2026-116078 - HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit