participants-database vulnerabilities

CVEs whose affected-version data names the participants-database package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-112860Critical· 9.3

6d ago

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/…

▾ Midnightxnau webdesign · participants-databaseEPSS 0.32%via CVEORG

CVE-2026-112862Critical· 9.8

6d ago

WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5.

▾ Midnightxnau webdesign · participants-databaseEPSS 0.41%via CVEORG

CVE-2026-112861Medium· 6.3

1w ago

WordPress Participants Database plugin <= 2.7.8.5 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Participants Database…

▾ Sunlitxnau webdesign · participants-databaseEPSS 0.28%via CVEORG