Medium
CVE-2026-65451
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-65458
Polylang <= 3.8.5 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-65450
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-24552
Create <= 2.5.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-65454
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-59525
Participants Database <= 2.7.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-65462
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-25405
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-15939
Simple Restrict < 1.2.9 - Authenticated (Contributor+) Information Exposure
High
Exploited in attacks
CVE-2026-60137
WordPress Core 6.8 - 7.0.1 - Unauthenticated SQL Injection via author__not_in Parameter
Medium
CVE-2026-9656
HubSpot All-In-One Marketing <= 11.3.62 - Authenticated (Contributor+) Sensitive Information Exposure via Block Editor Localized Script
Medium
CVE-2026-14503
pCloud WP Backup <= 2.0.3 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2026-13765
LearnPress <= 4.4.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via /lp/v1/users/check-answer and /start-quiz REST Endpoints
Medium
CVE-2026-14782
Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import
High
CVE-2026-61949
Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Unauthenticated SQL Injection
High
CVE-2026-61948
Premium Packages – Sell Digital Products Securely <= 6.2.0 - Unauthenticated SQL Injection
Medium
CVE-2026-61945
Notifima – WooCommerce Stock Manager, Inventory Management, Waitlist <= 3.0.6 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2026-61950
TrueBooker – Appointment Booking and Scheduler System <= 1.2.3 - Unauthenticated SQL Injection
Medium
CVE-2026-15727
WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter
Medium
CVE-2026-13754
Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter
Medium
CVE-2026-15651
WP TripAdvisor Review Slider <= 14.6 - Authenticated (Administrator+) SQL Injection via 'filtersource' Parameter
Medium
CVE-2026-15022
Tutor LMS <= 4.0.0 - Authenticated (Subscriber+) SQL Injection via Stored Quiz Answer Array
Medium
CVE-2026-13767
Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter
Medium
CVE-2026-15458
SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'sort_field' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.