High
CVE-2026-15462
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-87916
WPBot <= 8.5.9 - Unauthenticated Information Exposure
High
CVE-2026-84068
Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQL Injection
Medium
CVE-2026-19439
Ultimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Information Exposure
Medium
CVE-2026-81022
SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent 3.3.6 - 3.5.2 - Unauthenticated Information Exposure
Medium
CVE-2026-84222
Kirki – Freeform Page Builder, Website Builder & Customizer 6.2.1 - 6.2.5 - Unauthenticated Information Exposure
Medium
CVE-2026-14562
Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Information Exposure
Medium
CVE-2026-82848
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates 1.3.1 - 2.3.3 - Unauthenticated Information Exposure
Medium
CVE-2026-81804
ZHBackup – Backup, Restore & Migration <= 2.4.2 - Unauthenticated Information Exposure
High
CVE-2026-81800
Verified Reviews (Avis Vérifiés) <= 2.4.6 - Unauthenticated SQL Injection
High
CVE-2026-14359
YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user
Medium
CVE-2026-19778
WPMR Google Feed Manager for WooCommerce <= 2.23.7 - Authenticated (Administrator+) SQL Injection via 'feed' Parameter
Medium
CVE-2026-19944
WP Crowdfunding <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection via 'wpneo_reward' Post Meta
Medium
CVE-2026-19800
Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter
Medium
CVE-2026-84113
Quentn WP <= 1.2.14 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-80340
Payment Plugins for PayPal WooCommerce <= 2.0.25 - Unauthenticated Information Exposure
Medium
CVE-2026-16960
Loops & Logic <= 4.2.0 - Unauthenticated Information Exposure
High
CVE-2026-14962
ELEX WooCommerce Request a Quote <= 2.4.0 - Unauthenticated SQL Injection
Medium
CVE-2026-17509
WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Subscriber+) SQL Injection via ‘elementIds’
Medium
CVE-2026-19858
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Information Exposure
Medium
CVE-2026-80339
Payment Plugins for Stripe WooCommerce <= 4.0.11 - Unauthenticated Information Exposure
High
CVE-2026-82304
Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQL Injection
Medium
CVE-2026-84937
Video Player for YouTube – Embed Videos Your Visitors Will Love to Watch < 2.1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-81348
My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam < 4.2.3 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.