High
CVE-2026-78262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-78268
Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 - Unauthenticated Information Exposure
High
CVE-2026-32555
Boost <= 2.0.4 - Unauthenticated SQL Injection
High
CVE-2026-32554
WooCommerce Product Filter <= 3.1.8 - Unauthenticated SQL Injection
Medium
CVE-2026-77758
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions < 8.5.1 - Unauthenticated Information Exposure
Medium
CVE-2026-16959
Media Library Assistant < 3.40 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-14601
Link Whisper Free < 0.9.7 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-32471
ProLancer Element <= 1.4.8 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-32551
Woo Essential <= 4.3.0 - Unauthenticated SQL Injection
Medium
CVE-2026-16575
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Unauthenticated Information Exposure
Medium
CVE-2026-74928
Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation
High
CVE-2026-19094
Tutor LMS – eLearning and online course solution < 4.0.6 - Unauthenticated SQL Injection
Medium
CVE-2026-13736
NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Information Exposure
Medium
CVE-2026-78270
FluentCRM Pro <= 3.1.12 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-32478
WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-18778
TrueBooker – Appointment Booking and Scheduler System < 1.2.7 - Unauthenticated Information Exposure
Medium
CVE-2026-78470
WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-19699
GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor <= 2.4.15 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-19406
Easy Appointments < 4.0.1 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-19782
WPS Bidouille < 1.33.5 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-18231
WP Directory Kit < 1.5.7 - Unauthenticated Information Exposure
Medium
CVE-2026-16058
YayCurrency – WooCommerce Multi-Currency Switcher < 3.3.5 - Unauthenticated Information Exposure
High
CVE-2026-16950
Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection
Medium
CVE-2026-19709
Membership For WooCommerce < 3.1.2 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.