High
CVE-2026-11590
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2017-20249
Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection
High
CVE-2026-52693
eCommerce Product Catalog Plugin for WordPress <= 3.5.5 - Unauthenticated SQL Injection
High
CVE-2017-20245
Wow Viral Signups <= 2.1 - Unauthenticated SQL Injection
High
CVE-2017-20246
KittyCatfish <= 2.2 - Unauthenticated SQL Injection
High
CVE-2017-20243
Car Park Booking System <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2026-49068
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.8.1 - Authenticated (Subscriber+) Information Exposure
High
CVE-2016-20062
Simply Poll <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2026-8883
Global Body Mass Index Calculator <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
High
CVE-2026-49076
JetEngine <= 3.8.9.1 - Unauthenticated SQL Injection
Medium
CVE-2026-49066
Conekta Payment Gateway <= 6.0.0 - Unauthenticated Information Exposure
High
CVE-2026-49080
wpDataTables (Premium) <= 7.3.6 - Unauthenticated SQL Injection
High
CVE-2026-49772
The Events Calendar 6.15.12-6.16.2 - Unauthenticated SQL Injection
Medium
CVE-2026-49064
Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.49 - Unauthenticated Information Exposure
High
CVE-2026-49067
Advanced 301 and 302 Redirect <= 1.6.9 - Unauthenticated SQL Injection
Medium
CVE-2026-52692
Affiliates Manager <= 2.9.50 - Unauthenticated Information Exposure
High
CVE-2026-49084
JetEngine < 3.8.9.1 - Unauthenticated SQL Injection
Medium
CVE-2026-49073
Booking (Reservation & Appointment) <= 3.0.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-9829
Photo Gallery by 10Web <= 1.8.41 - Authenticated (Contributor+) SQL Injection via 'compact_album_order_by' Shortcode Parameter
Medium
CVE-2026-7665
Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler
Medium
CVE-2026-8502
LearnPress <= 4.3.6 - Unauthenticated Sensitive Information Exposure via 'c_status' and 'return_type' Parameters
Medium
CVE-2026-8978
OptinCraft <= 1.2.0 - Authenticated (Administrator+) SQL Injection via 'order_by' Parameter
Medium
CVE-2026-6448
Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters
High
CVE-2026-5411
WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.