Medium
CVE-2026-14925
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-16253
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.3 - Unauthenticated Information Exposure
Medium
CVE-2026-14213
Booking for Appointments and Events Calendar – Amelia < 2.4.6 - Authenticated (Custom role+) Information Exposure
Medium
CVE-2026-12248
WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
Medium
CVE-2026-19073
Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Information Exposure
Medium
CVE-2026-18945
WP Helper Premium < 4.7.6 - Unauthenticated Information Exposure
Medium
CVE-2026-16094
Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter
Medium
CVE-2026-15993
Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause
Medium
CVE-2026-16810
Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter
Medium
CVE-2026-12743
affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Medium
CVE-2026-13177
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-12976
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses < 4.4.4 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16541
Simply Schedule Appointments <= 1.6.12.16 - Authenticated (Team Member+) Information Exposure
Medium
CVE-2026-16611
Product Feed PRO for WooCommerce <= 13.5.6 - Unauthenticated Information Exposure
Medium
CVE-2026-28156
Do Lasso <= 358 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-28168
CubeWP <= 1.1.30 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-13168
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-13612
KiviCare – Clinic & Patient Management System (EHR) < 4.5.2 - Authenticated (Custom role+) Information Exposure
Medium
CVE-2026-28174
Event SOlution <= 4.1.18 - Authenticated (Customer+) Information Exposure
Medium
CVE-2026-28002
Booktics 1.0.22 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-28142
Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection
High
CVE-2026-15205
Paymob for WooCommerce <= 4.1.8 - Unauthenticated SQL Injection
High
CVE-2026-28001
Directory Kit <= 1.5.4 - Unauthenticated SQL Injection
Medium
CVE-2026-73346
Mailchimp for WooCommerce < 6.2 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.