Medium
CVE-2026-11357
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-11776
Form Maker by 10Web <= 1.15.43 - Authenticated (Adminsitrator+) SQL Injection via 'groupids' Parameter
Medium
CVE-2026-11777
Form Maker by 10Web <= 1.15.43 - Authenticated (Administrator+) SQL Injection via 'name' Parameter
Medium
CVE-2026-10029
Event Koi Lite <= 1.3.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure via REST API Endpoints
Medium
CVE-2026-10023
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers
High
CVE-2026-54819
Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.4.0 - Unauthenticated SQL Injection
High
CVE-2026-54809
GIFT4U – Gift Cards All in One for Woo <= 1.0.10 - Unauthenticated SQL Injection
High
CVE-2026-54825
wpDataTables (Premium) <= 7.4 - Unauthenticated SQL Injection
High
CVE-2026-54831
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.162 - Unauthenticated SQL Injection
High
CVE-2026-54829
WP Photo Album Plus <= 9.1.13.005 - Unauthenticated SQL Injection
Medium
CVE-2026-54818
SlimStat Analytics <= 5.4.11 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-54813
SureDash – Community, Courses & Member Dashboard <= 1.8.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-12120
FireBox Popups <= 3.1.7 - Unauthenticated Sensitive Information Exposure in 'form_id' Parameter
High
CVE-2026-54815
Cargo Shipping Location for WooCommerce <= 5.6 - Unauthenticated SQL Injection
Medium
CVE-2026-54821
Visual Link Preview <= 2.3.1 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2026-54812
Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Unauthenticated SQL Injection
High
CVE-2026-54827
Real Estate 7 WordPress <= 3.5.9 - Unauthenticated SQL Injection
Medium
CVE-2026-54822
SALESmanago & Leadoo <= 3.11.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-54834
Object Cache 4 everyone <= 2.3.2 - Information Exposure
High
CVE-2026-54808
WP Travel Gutenberg Blocks <= 3.9.4 - Unauthenticated SQL Injection
High
CVE-2026-54820
JetBooking <= 4.0.4.1 - Unauthenticated SQL Injection
Medium
CVE-2026-54824
Quads Ads Manager for Google AdSense <= 3.0.3 - Unauthenticated Information Exposure
High
CVE-2026-54811
Wp EMember < v10.9.4 - Unauthenticated SQL Injection
High
CVE-2026-54186
JobSearch WP Job Board <= 3.2.9 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.