PULSEUnderground Intel

EN VIVO34señales / 24h

FEED

ransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomakira reclama a Basic Grain Products · Agriculture and Food Productionransomakira reclama a Pharma Test Apparatebau AG · CH · Manufacturingransomplay reclama a Signature Services · Professional Servicesransomplay reclama a GCATS Investments · US · Financial Servicesransomplay reclama a Platinum Group · SG · Manufacturingransomlynx reclama a www.jerryleigh.com · US · Otherransomlynx reclama a www.talbotdes.org · GB · Otherransomgammax reclama a King International LLC · US · Otherransomqilin reclama a AmSpec · US · Energy & Utilitiesransomqilin reclama a ALIZE (alize-sud.fr) · FR · Professional Servicesransomqilin reclama a Jakle & Alexander · US · Not Foundransomqilin reclama a Akuur Law Firm · TR · Professional Servicesransomqilin reclama a J&T Bank and Trust · US · Financial Servicesransombravox reclama a MITC AG · CH · Otherransomakira reclama a Basic Grain Products · Agriculture and Food Productionransomakira reclama a Pharma Test Apparatebau AG · CH · Manufacturing

← Todos los CVEs

CVE Watch6 ago 2026

CVE-2026-65546

Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.

CVSS

9.3

Crítico

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 6 ago 2026 · Última mod.: 6 ago 2026 · CWE-89

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.

Referencias oficiales

patchstack.comhttps://patchstack.com/database/wordpress/plugin/qode-tours/vulnerability/wordpress-qode-tours-plugin-3-1-3-1-sql-injection-vulnerability?_s_id=cve

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-664479.3 CRÍ

———Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.7h CVE-2026-655698.5 ALT

———Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.7h CVE-2026-655478.5 ALT

———Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.7h CVE-2026-655209.3 CRÍ

———Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.7h CVE-2026-655089.3 CRÍ

———Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.7h CVE-2026-34191—

———Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.38h