CVE ID :CVE-2026-111850 Published : Oct. 28, 2026, 1:17 p.m. | 1 hour, 7 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows SQL Injection.This issue affects BuddyPress: from n/a...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111850 - WordPress BuddyPress plugin <= 14.5.2 - SQL Injection vulnerability

VERWANDTEARTIKEL

HiRDB: Sechs kritische Schwachstellen erlauben Angriffe ohne Anmeldung

CVE-2026-65145: Kritische Lücke in NVIDIA NeMo Agent Toolkit ermöglicht Angriffe ohne Anmeldung

CVE-2026-115968 - WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability

CVE-2026-115603 - WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability

CVE-2026-116389 - WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability

CVE-2026-116078 - HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit