Vulnerability

95,000 Users at Risk: SQL Injection Lurks in Porto Theme Plugin

Do Son December 20, 2023 2 minutes read

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Leave a Reply Cancel reply

You must be logged in to post a comment.

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-75650CVSS 10.0
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that...
Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 8, 2026
CVE-2026-81963CVSS 7.8
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate...
CISA KEV📅 Added to KEV: Sep 8, 2026
CVE-2026-85880CVSS 7.8
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Sep 8, 2026
CVE-2026-86218CVSS 10.0
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 7, 2026
CVE-2026-67278CVSS 6.3
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67279CVSS 6.9
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67281CVSS 8.7
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-86060CVSS 9.2
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character,...
Admin intel📅 Updated: Sep 7, 2026

Critical Alert 4 Active Exploits Detected Today

🔐 Access to This Vulnerability Report Requires Support

Get Zero-Hour Vulnerability Alerts

Do Son

Leave a Reply Cancel reply