Medium
CVE-2026-92423
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-85652
Photo Gallery by 10Web <= 1.8.44 - Authenticated (Author+) SQL Injection via 'album_id' Shortcode Attribute
High
CVE-2026-15275
WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter
High
CVE-2026-85705
Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters
Medium
CVE-2026-75961
NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter
Medium
CVE-2026-17607
WP Inventory Manager <= 2.5.1 - Authenticated (Contributor+) SQL Injection via 'where' Shortcode Attribute
High
CVE-2026-18442
WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter
Medium
CVE-2026-17576
InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key
Medium
CVE-2026-66580
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels <= 7.12.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-66618
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters <= 4.9.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66619
Newsletters <= 4.18 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66624
WPMasterToolKit (WPMTK) – All in one plugin <= 2.22.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66625
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.7.2.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66626
SKT Addons for Elementor <= 4.0 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-66628
WP-Lister Lite for eBay <= 3.8.11 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2026-66631
MoreConvert Wishlist for WooCommerce <= 1.9.21 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66630
Issues and Series for Newspapers, Magazines, Publishers, Writers <= 3.1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-89278
GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script
High
CVE-2026-88926
VikRentItems Flexible Rental Management System <= 1.2.3 - Unauthenticated SQL Injection
Medium
CVE-2026-92404
MgoSync 2.1.5 - 2.1.6 - Unauthenticated Information Exposure
Medium
CVE-2026-92465
WP Mega Menu <= 1.4.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-16557
Nimble Builder <= 3.3.8 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-87771
Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection
High
CVE-2026-87770
Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.