Medium
CVE-2025-26946
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-26971
Poll Maker <= 5.6.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-26943
Easy Quotes <= 1.2.2 - Unauthenticated SQL Injection
High
CVE-2025-26974
WP Multistore Locator <= 2.5.1 - Unauthenticated SQL Injection
Medium
CVE-2025-26915
Wishlist <= 1.0.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-26983
Recipe Card Blocks for Gutenberg & Elementor <= 3.4.3 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Disclosure
Medium
CVE-2025-26911
System Dashboard <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2024-13474
LTL Freight Quotes – Purolator Edition <= 2.2.3 - Unauthenticated SQL Injection
High
CVE-2025-27302
CHATLIVE <= 2.0.1 - Unauthenticated SQL Injection
Medium
CVE-2025-27324
17TRACK for WooCommerce <= 1.2.10 - Reflected Cross-Site Scripting
Medium
CVE-2025-27281
All In Menu <= 1.1.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-27293
Shipmozo Courier Tracking <= 1.0 - Reflected Cross-Site Scripting
High
CVE-2025-27268
Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Unauthenticated SQL Injection
Medium
CVE-2025-27263
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-13713
WPExperts Square For GiveWP <= 1.3.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-13846
Indeed Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection via post_id Parameter
Medium
CVE-2024-12276
Ultimate Member <= 2.9.2 - Authenticated SQL Injection
High
CVE-2024-11260
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter
Medium
CVE-2024-13235
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-0866
Legoeso PDF Manager <= 1.2.2 - Authenticated (Author+) SQL Injection via checkedVals Parameter
Medium
CVE-2024-13855
Prime Addons for Elementor <= 2.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference via pae_global_block Shortcode
High
CVE-2024-13476
LTL Freight Quotes – GlobalTranz Edition <= 2.3.11 - Unauthenticated SQL Injection
High
CVE-2025-0916
YaySMTP 2.4.9 - 2.6.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-13479
LTL Freight Quotes – SEFL Edition <= 3.2.4 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.