High
CVE-2026-2343
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-39495
Simply Schedule Appointments <= 1.6.9.27 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-39564
Sunshine Photo Cart < 3.6.2 - Unauthenticated Information Exposure
Medium
CVE-2026-39466
Broken Link Checker <= 2.4.7 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-39516
Nexter Blocks <= 4.7.0 - Unauthenticated Information Exposure
Medium
CVE-2026-39571
Instantio <= 3.3.30 - Unauthenticated Information Exposure
Medium
CVE-2026-39487
Amelia <= 2.1.1 - Authenticated (Custom role+) SQL Injection
Medium
CVE-2026-39486
Download Monitor <= 5.1.8 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-2511
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter
High
CVE-2026-4662
JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via Listing Grid 'filtered_query' Parameter
Medium
CVE-2026-3079
LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' Parameter
High
CVE-2026-4306
WP Job Portal <= 2.4.8 - Unauthenticated SQL Injection via 'radius' Parameter
Medium
CVE-2026-2412
Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter
Medium
CVE-2026-3225
LearnPress <= 4.3.2.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Answer Deletion
Medium
CVE-2026-25007
ElementInvader Addons for Elementor <= 1.4.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-25401
WPCargo Track & Trace <= 8.0.2 - Missing Authorization
Medium
CVE-2026-39479
OttoKit <= 1.1.20 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-25339
WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More <= 1.9.8.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-40745
Element Pack Elementor Addons <= 8.4.2 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-39497
FOX <= 1.4.5 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2026-39566
DirectoryPress <= 3.6.26 - Unauthenticated Information Exposure
High
CVE-2025-15441
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.38 - Unauthenticated SQL Injection
High
CVE-2026-25340
Noo JobMonster < 4.8.4 - Unauthenticated SQL Injection
Medium
CVE-2026-40744
Beaver Builder <= 2.10.1.2 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.