Medium
CVE-2026-66585
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-74011
InfiniteWP Client <= 1.13.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-18653
WP Directory Kit < 1.5.7 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-66680
Locatoraid Store Locator <= 3.9.72 - Unauthenticated SQL Injection
High
CVE-2026-66649
Directory Pro <= 2.5.8 - Unauthenticated SQL Injection
High
CVE-2025-15688
Capella | Restaurant WordPress <= 2.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-74013
eShipper Commerce <= 2.16.13 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-68566
BookingPress Appointment Booking Pro <= 6.0.6 - Unauthenticated SQL Injection
High
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
High
CVE-2026-73185
NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection
High
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
High
CVE-2026-73388
Nikstore Core <= 1.5 - Unauthenticated SQL Injection
Medium
CVE-2026-66668
Community by PeepSo – Download from PeepSo.com <= 9.0.5.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-73183
Maps Marker Pro <= 4.32 - Unauthenticated SQL Injection
Medium
CVE-2026-73998
WP w3all phpBB <= 3.0.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-66593
Security Plugin, Firewall & Malware Scanner with Auto Removal <= 2.184 - Unauthenticated SQL Injection
Medium
CVE-2026-73384
Pay with Contact Form 7 <= 1.0.4 - Unauthenticated Information Exposure
Medium
CVE-2026-73386
Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 - Unauthenticated Information Exposure
Medium
CVE-2026-66594
Persistent Login <= 3.1.0 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2026-73391
Total Donations <= 2.0.5 - Unauthenticated SQL Injection
High
CVE-2026-66622
Depicter — Popup & Slider Builder <= 4.8.0 - Unauthenticated SQL Injection
Medium
CVE-2026-32552
YITH WooCommerce Membership Premium <= 2.33.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-74015
Readabler < 2.0.18 - Unauthenticated SQL Injection
High
CVE-2026-73187
Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons <= 1.4.2 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.