High
CVE-2026-77018
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-78138
Finale Lite – Sales Countdown Timer & Discount for WooCommerce < 2.21.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-74916
WP Fastest Cache – WordPress Cache Plugin 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning
Medium
CVE-2026-80433
SureFeedback Client Site <= 1.2.12 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-77790
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-81277
Suggestion Engine for WooCommerce <= 2.0.11 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-74930
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 2.2.0 - 4.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Critical
CVE-2026-19092
Tutor LMS <= 4.0.5 - Unauthenticated Arbitrary Zero-Argument Function Invocation
Medium
CVE-2026-13172
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.22 - Unauthenticated Information Exposure
Medium
CVE-2026-74929
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker < 4.0.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Critical
CVE-2026-19632
TranslatePress – Multilingual <= 3.3.1 - Unauthenticated Account Takeover via Password Reset Link Disclosure
Medium
CVE-2026-78125
LearnPress – Sepay Payment < 4.0.3 - Unauthenticated Information Exposure
High
CVE-2026-77016
Workeera – AI Job Board with Applicant Tracking System (ATS) < 1.0.6 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-78285
Like Button Rating ♥ LikeBtn <= 2.6.61 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-16612
FiboSearch – Ajax Search for WooCommerce < 1.34.1 - Unauthenticated Information Exposure
Medium
CVE-2026-32550
Kadence Shop Kit <= 3.0.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-78260
ePayco plugin for WooCommerce <= 8.4.6 - Unauthenticated SQL Injection
High
CVE-2026-18884
WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters
Medium
CVE-2026-32564
ACPT (Premium) <= 2.0.63 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-32479
Visitor Traffic Real Time Statistics pro <= 11.17 - Unauthenticated SQL Injection
High
CVE-2026-78288
Beautiful taxonomy filters <= 2.4.6 - Unauthenticated SQL Injection
Medium
CVE-2026-77824
Media Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter
High
CVE-2026-19949
All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution
Medium
CVE-2026-15023
Events Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate Action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.