Medium
CVE-2026-93899
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-19708
File Manager 7.2.2 - 8.0.4 - Unauthenticated Information Exposure
Medium
CVE-2026-84097
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-94674
Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing <= 1.69.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-96834
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.9 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-96526
MCP Server for WordPress <= 1.8.1 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-16302
Spectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-96826
W4 Post List <= 3.0.6 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-95590
Tainacan <= 1.2.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-94174
Email Log <= 2.63 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-95593
Ultimeter – the Ultimate Progress and Goals Meter <= 3.0.8 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-94124
Shopping Cart & eCommerce Store <= 5.9.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-93773
Mollie Forms <= 2.11.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-93527
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-95522
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.0 - Authenticated (Shop Manager+) SQL Injection
High
CVE-2026-95601
Product Filter for WooCommerce by WBW <= 3.1.7 - Unauthenticated SQL Injection
High
CVE-2026-89237
Bluff Post <= 1.1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-96828
Simple Discount Rules for Woocommerce <= 5.18 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-96345
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-96827
Admin Notices Manager <= 1.6.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-11871
Team Showcase Supreme <= 9.2 - Unauthenticated Information Exposure
Medium
CVE-2026-96346
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.9 - Authenticated (Author+) SQL Injection
High
CVE-2026-93368
Rename wp-login.php to anything you want <= 2.0.1 - Unauthenticated SQL Injection via 'log' (Username) Parameter
Medium
CVE-2026-82850
Masteriyo LMS <= 3.4.1 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.