Medium
CVE-2026-16596
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-6806
Motors <= 1.4.109 - Unauthenticated Blind SQL Injection via 'stm_lat'/'stm_lng' Parameters
Medium
CVE-2026-97241
BackupEase – Scheduled Backup, Restore & Site Migration <= 2.2.2 - Unauthenticated Information Exposure
Medium
CVE-2026-97240
StifLi Backup Tools <= 2.2.7 - Unauthenticated Information Exposure
High
CVE-2026-96822
Books Gallery – Book Showcase, Library & Affiliate Plugin <= 4.8.3 - Unauthenticated SQL Injection
High
CVE-2026-89296
Pro Like Button <= 1.0 - Unauthenticated SQL Injection
High
CVE-2026-81809
Paytm Payment Gateway <= 2.8.8 - Unauthenticated SQL Injection
Medium
CVE-2026-96255
Payments for Hubtel <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2026-90988
Request a Quote <= 2.5.6 - Unauthenticated Information Exposure
Medium
CVE-2026-80333
Solace Extra <= 1.7.1 - Unauthenticated Information Exposure
Medium
CVE-2026-90953
Image Optimizer by Elementor <= 1.7.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-96886
Course Booking System <= 7.0.8 - Unauthenticated Information Exposure
Medium
CVE-2026-83560
New User Approve 3.1.0 - 3.2.9 - Unauthenticated Information Exposure
Medium
CVE-2026-96821
FluentBoards – Project Management, Task Management, Goal Tracking, Kanban Board, and, Team Collaboration <= 2.0.12 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-96342
WPMobile.App – Android and iOS App Builder <= 11.83 - Unauthenticated Information Exposure
Medium
CVE-2026-86789
Connections Business Directory <= 10.4.67 - Unauthenticated Information Exposure
Medium
CVE-2026-94274
YayReviews 1.0.4 - 1.4.0 - Unauthenticated Information Exposure
High
CVE-2026-93000
SPS-Suite <= 1.4.0 - Unauthenticated SQL Injection
High
CVE-2026-94177
GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI <= 8.0.2 - Unauthenticated SQL Injection
High
CVE-2026-93621
WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.84 - Unauthenticated SQL Injection
Medium
CVE-2026-89303
Post Voting System <= 1.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-82841
UpdraftPlus 1.23.8 - 1.26.7 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-92995
Verge3D <= 4.13.0 - Unauthenticated Information Exposure
High
CVE-2026-19804
s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.