Medium
CVE-2026-17022
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-13389
webtoffee-cookie-consent < 3.5.3 - Missing Authorization
High
CVE-2026-19049
ProSolution WP Client <= 2.0.8 - Unauthenticated SQL Injection
Critical
CVE-2026-65570
OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute Force
High
CVE-2026-65577
Advice - Psychology, Therapy & Counseling Theme <= 1.18.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-61981
Simple Link Directory Pro - AI Powered <= 15.0.8 - Cross-Site Request Forgery
High
CVE-2026-16949
Term Pages <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2026-12971
LearnPress <= 4.4.3 - Authenticated (Instructor+) Server-Side Request Forgery
Medium
CVE-2026-66678
Advanced Custom Fields: Font Awesome Field <= 6.1.2 - Missing Authorization
High
CVE-2026-66424
SMS Alert Order Notifications <= 3.9.7 - Unauthenticated Privilege Escalation
Medium
CVE-2026-16540
Simply Schedule Appointments < 1.6.12.6 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-14840
YOP Poll 7.0.0-7.0.5 - IP Spoofing to Vote Restriction Bypass
Medium
CVE-2026-15238
Hotel Booking Lite <= 6.2.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Customer Data Modification
High
CVE-2026-19053
ProSolution WP Client <= 2.0.5 - Unauthenticated SQL Injection
Medium
CVE-2026-15229
Pinpoint Booking System <= 2.9.9.7.1 - Missing Authorization to Unauthenticated Arbitrary Booking Price Manipulation
Medium
CVE-2026-18934
RSS Aggregator by Feedzy <= 5.2.5 - Missing Authorization to Authenticated (Author+) Cross-User Import Job Manipulation and Post Deletion
High
CVE-2026-65576
Adrena | Airsoft Club & Paintball WordPress Theme <= 1.2.14 - Unauthenticated PHP Object Injection
Medium
CVE-2026-13170
Eventin <= 4.1.19 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2026-32548
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.6.2 - Missing Authorization
High
CVE-2026-14920
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 10.11.1 - Unauthenticated SQL Injection
Medium
CVE-2026-66681
Theme My Login <= 7.1.14 - Cross-Site Request Forgery
Medium
CVE-2026-13600
AutoNetTV Relay <= 3.0.13 - Unauthenticated Privilege Escalation
Medium
CVE-2026-14941
Customer Reviews for WooCommerce <= 5.115.0 - Missing Authorization
High
CVE-2026-65581
AI ANN - AI Generator & AI Agency WordPress Theme <= 1.29.0 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.