CVE-2026-92926
A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the fil
CVSS
7.3
High
EPSS
0.3%
p19
KEV
—
Exploit Today
6
0-100
Published: Sep 17, 2026 · Last modified: Sep 17, 2026 · CWE-74 · CWE-89
Not enough EPSS history yet.
A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
- code-projects.orghttps://code-projects.org/
- github.comhttps://github.com/KaranParelkar/Matrimonial_system_sqli/blob/main/partner_preference/sqli_education/Readme.md
- vuldb.comhttps://vuldb.com/cve/CVE-2026-92926
- vuldb.comhttps://vuldb.com/submit/942287
- vuldb.comhttps://vuldb.com/vuln/406377
- vuldb.comhttps://vuldb.com/vuln/406377/cti
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-666317.6 HIG20.6%
——6Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.23hCVE-2026-666307.6 HIG20.6%
——6Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.23hCVE-2026-666287.6 HIG20.6%
——6Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.23hCVE-2026-666267.6 HIG20.6%
——6Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.23hCVE-2026-666257.6 HIG20.6%
——6Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.23hCVE-2026-666247.6 HIG20.6%
——6Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.23h