Medium
CVE-2026-54185
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-8444
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter
High
CVE-2026-8443
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
Medium
CVE-2026-52712
Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2016-20071
404 SEO Redirection <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2019-25746
Sliced Invoices – WordPress Invoice Plugin <= 3.8.2 - Authenticated (Contributor+) SQL Injection
High
CVE-2018-25437
Cherry Framework <= 3.1.4 - Unauthenticated Backup Download
High
CVE-2026-54187
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection
Medium
CVE-2026-54197
GetGenie – AI Content Writer with Keyword Research & SEO Tracking <= 4.4.1 - Unauthenticated Information Exposure
High
CVE-2026-52715
GEO my WP <= 4.5.5 - Unauthenticated SQL Injection
High
CVE-2026-9848
WP Ticket <= 6.0.4 - Unauthenticated SQL Injection via WordPress Search 's' Parameter
Medium
CVE-2026-24618
Hash Elements <= 1.5.4 - Authenticated (Contributor+) Information Exposure
High
CVE-2026-6379
WP Photo Album Plus < 9.1.11.001 - Unauthenticated SQL Injection
High
CVE-2026-3326
XStore < 9.7.3 - Unauthenticated SQL Injection
High
CVE-2026-7385
Decent Comments < 3.0.2 - Unauthenticated Information Exopsure
Medium
CVE-2025-15609
Fortis for WooCommerce < 1.3.1 - Unauthenticated Information Exposure
Medium
CVE-2026-52695
ABC Crypto Checkout <= 1.8.2 - Unauthenticated Information Exposure
Medium
CVE-2026-52700
WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce <= 3.0.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-52696
JetBlog <= 2.4.8 - Unauthenticated Information Exposure
Medium
CVE-2026-52694
Digital Signature Add-on for WooCommerce <= 2.0 - Unauthenticated Information Exposure
Medium
CVE-2026-52698
PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget <= 4.2.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-52697
Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-3018
Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
Medium
CVE-2016-20063
Simple Personal Message <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.