Medium
CVE-2026-57636
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-13402
Royal Elementor Addons <= 1.7.1062 - Unauthenticated Information Exposure
Medium
CVE-2026-13331
Groundhogg <= 4.5.5 - Authenticated (Marketer+) SQL Injection via 'search' Parameter
Medium
CVE-2026-57663
Recipe Cards For Your Food Blog from Zip Recipes <= 8.2.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57662
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57667
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5 - Authenticated (Sales representative+) SQL Injection
Medium
CVE-2026-13226
Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter
Medium
CVE-2026-56060
Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 - Unauthenticated Information Exposure
Medium
CVE-2026-57619
Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-56064
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-56062
Quotes llama <= 3.1.5 - Unauthenticated SQL Injection
Medium
CVE-2026-12395
Job Portal <= 2.5.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-56067
JetSmartFilters <= 3.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-7842
Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection
High
CVE-2026-56070
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection
Critical
CVE-2026-57700
OMGF Pro <= 5.2.6 - Unauthenticated Arbitrary File Upload via @import URL Reflection
Medium
CVE-2026-8163
Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-56068
JetEngine <= 3.8.10.2 - Unauthenticated SQL Injection
Medium
CVE-2026-12906
RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure
High
CVE-2026-12937
Tourfic <= 2.22.7 - Unauthenticated SQL Injection via 'post_id' Parameter
Medium
CVE-2026-2508
Gravity Forms Booking <= 2.7.1 - Authenticated (Subscriber+) Time-Based SQL Injection via 'staff_id'
High
CVE-2026-12077
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
Medium
CVE-2026-12079
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
High
CVE-2026-12512
Quotes Llama <= 3.1.5 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.