High
CVE-2026-13161
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-14516
Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated SQL Injection
High
CVE-2026-12800
Premium Packages <= 6.2.0 - Unauthenticated SQL Injection
High
CVE-2026-12741
WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection
Medium
CVE-2026-15670
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Medium
CVE-2026-15673
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' Settings
Medium
CVE-2026-16811
ShopLentor <= 3.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Medium
CVE-2026-6251
Chaty Pro <= 3.5.5 - Authenticated (Subscriber+) SQL Injection via 'widget_id' Parameter
Medium
CVE-2026-15671
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter
Medium
CVE-2026-14872
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.4 - Authenticated (Authenticated+) SQL Injection
Medium
CVE-2026-65434
ЮKassa для WooCommerce <= 2.16.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-66427
Google Review Slider <= 18.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66438
Exclusive Addons Elementor <= 2.8.0 - Unauthenticated Information Exposure
High
CVE-2026-16572
LogMyTrip <= 1.9 - Unauthenticated SQL Injection
Medium
CVE-2026-65564
MapPress – Google Maps, OpenStreetMap & Leaflet <= 2.97.6 - Unauthenticated Information Exposure
High
CVE-2026-12965
Super Store Finder <= 7.10 - Unauthenticated SQL Injection
Medium
CVE-2026-16539
SM Page Duplicator <= 1.0.0 - Authenticated (Editor+) SQL Injection
High
CVE-2026-65558
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking <= 2.3.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-15663
Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key
Medium
CVE-2026-59548
Byteflows Travel & Hotel Booking <= 1.0.0 - Unauthenticated Information Exposure
High
CVE-2026-59533
Relevanssi Light <= 1.2.2 - Unauthenticated SQL Injection
Medium
CVE-2026-59537
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-15236
Gallery for Google Photos <= 1.2.0 - Unauthenticated Google OAuth Token Disclosure
Medium
CVE-2026-59528
ShipTime: Discount Shipping <= 1.1.1 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.