Discover Tuta Mail: Turn ON Privacy. Take back your data with Tuta's encrypted email, calendar and contacts.
Be informed about the latest WP SQL Injections, identified and reported publicly. WP SQLi APR 2024 is a +158% INCREASE compared to previous month, as specifically targeted SQL Injections. Consider for your online safety, a managed WP/Woo Security AUDIT, - OR - switching with a TOP10LIST alternative WP Security Plugin - OR - Hire professionals for managed Security.
As these SQL injection cases from publicly reported vulnerable plugins are on your domain, it opens Pandora’s box from a security point of view. The following cases made headlines PUBLICLY in the WP SQLi APR 2024 & WP SQL Injections APR 2024 category:
| 10Web Map Builder for Google Maps | SQL Injection (SQLi) |
| 404 Solution | SQL Injection (SQLi) |
| Action Network | SQL Injection (SQLi) |
| Advanced Form Integration | SQL Injection (SQLi) to Cross-Site Scripting (XSS) via integration_id |
| Avada Theme | SQL Injection (SQLi) via entry |
| AWeber | SQL Injection (SQLi) |
| Calendarista | SQL Injection (SQLi) |
| Church Admin | SQL Injection (SQLi) via shortcode |
| Contact Form to Any API | SQL Injection (SQLi) |
| Contest Gallery | SQL Injection (SQLi) |
| Contest Gallery | SQL Injection (SQLi) |
| Conversios.io | SQL Injection (SQLi) |
| Create by Mediavine | Unauthenticated SQL Injection (SQLi) via 'id' |
| CRM Perks Forms | SQL Injection (SQLi) |
| CRM Perks Forms | Unauthenticated SQL Injection (SQLi) |
| DecaLog | SQL Injection (SQLi) |
| Download Monitor | SQL Injection (SQLi) |
| Easy Form Builder | SQL Injection (SQLi) |
| Easy Property Listings | SQL Injection (SQLi) via Shortcode |
| Element Pack Elementor Addons | SQL Injection (SQLi) |
| Falang multilanguage | SQL Injection (SQLi) |
| Fancy Product Designer | SQL Injection (SQLi) |
| GamiPress | SQL Injection (SQLi) via Shortcode |
| HUSKY – Products Filter for WooCommerce (formerly WOOF) | SQL Injection (SQLi) |
| Media Library Assistant | SQL Injection (SQLi) via Shortcode |
| Media Library Folders | SQL Injection (SQLi) |
| Network Summary | Unauthenticated SQL Injection (SQLi) |
| News Announcement Scroll | SQL Injection (SQLi) via Shortcode |
| OSS Aliyun | SQL Injection (SQLi) |
| Pods | SQL Injection (SQLi) via Shortcode |
| ProfileGrid | SQL Injection (SQLi) |
| ProfileGrid | SQL Injection (SQLi) |
| ProfileGrid | SQL Injection (SQLi) |
| RegistrationMagic | SQL Injection (SQLi) |
| Simply Schedule Appointments | SQL Injection (SQLi) via Shortcode |
| Simply Schedule Appointments | SQL Injection (SQLi) |
| Slider by Supsystic | SQL Injection (SQLi) |
| Tutor LMS | SQL Injection (SQLi) |
| WordPress Announcement & Notification Banner Plugin – Bulletin | SQL Injection (SQLi) |
| WordPress Tooltips | SQL Injection (SQLi) |
| WP Cost Estimation & Payment Forms Builder | SQL Injection (SQLi) |
| WP ERP | SQL Injection (SQLi) |
| WP ERP | SQL Injection (SQLi) |
| WP ERP | SQL Injection (SQLi) via id |
| WP Responsive Tabs horizontal vertical and accordion Tabs | SQL Injection (SQLi) |
| WP Travel Engine | SQL Injection (SQLi) |
| WP Travel Engine | Unauthenticated SQL Injection (SQLi) |
| Zoho Campaigns | SQL Injection (SQLi) |
| Zotpress | SQL Injection (SQLi) |
| WordPress SQL Injections (SQLi) reported in 2023: | 223 |
| WordPress SQL Injections (SQLi) reported in 2024: | 84 |
How wonderful would be to simply let others take care of your chores? We absolutely understand why you would want that. This is why we propose this unique campaign: the price of one cup of coffee for a managed service.
Start simply by contacting us with your selections:
We care about the protection of your personal data. Update, subscribe or unsubscribe anytime. Read our Privacy Policy.