CVE-2026-94177

HighCVSS 8.5/10Last modified Oct 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.2.

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 30, 2026
Last modified: Oct 17, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-941787.5Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.CVE-2026-941797.1Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.CVE-2026-94184.3A flaw has been found in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the fil CVE-2026-941804.3Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This i CVE-2026-941817.4An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element th CVE-2026-941837.4Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is CVE-2026-941845.3A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising N CVE-2026-941855.5nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the req CVE-2026-94194.3A vulnerability has been found in code-projects Employee Management System 1.0. Affected by this issue is some unknown functionality of the CVE-2026-941928.5A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back CVE-2026-941946.3Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1 CVE-2026-941977.5An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `Ex