High
CVE-2026-73365
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-73355
Affiliates Manager <= 2.9.53 - Unauthenticated SQL Injection
Medium
CVE-2026-32468
Duitku Payment Gateway <= 2.11.14 - Unauthenticated Information Exposure
Medium
CVE-2026-73345
License Manager for WooCommerce <= 3.0.18 - Authenticated (Customer+) SQL Injection
Medium
CVE-2026-74007
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 - Unauthenticated Information Exposure
Medium
CVE-2026-74008
Shortcodes and extra features for Phlox theme <= 2.17.22 - Unauthenticated Information Exposure
High
CVE-2026-73339
Modern Events Calendar < 7.35.0 - Unauthenticated SQL Injection
Medium
CVE-2026-32466
Gravity Bookings <= 2.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-12983
Dinatur <= 1.18 - Unauthenticated SQL Injection
High
CVE-2026-2497
Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys
Medium
CVE-2026-15351
WC Vendors <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' Parameter
Medium
CVE-2026-2283
User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter
Medium
CVE-2026-9767
The School Management <= 5.4 - Authenticated (Custom+) SQL Injection via 'order[0][dir]' Parameter
Medium
CVE-2026-17582
Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate)
Medium
CVE-2026-15963
Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option
Medium
CVE-2026-15602
NEX-Forms <= 9.2.4 - Authenticated (Admin+) SQL Injection via 'additional_params' Parameter
Medium
CVE-2026-15066
Loco Translate <= 2.8.7 - Authenticated (Translator+) Stored Cross-Site Scripting via PO File Extracted Comments
Medium
CVE-2026-16079
Fullscreen Galleria <= 1.6.12 - Authenticated (Contributor+) SQL Injection via 'href' Attribute in Post Content
Medium
CVE-2026-15453
KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter
Medium
CVE-2026-18387
Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter
Medium
CVE-2026-16146
Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via Pattern JSON Keys/Values
Medium
CVE-2026-16586
Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'
Medium
CVE-2026-16080
Image Uploader for Welcart <= 1.4.6 - Authenticated (Author+) SQL Injection via Attachment 'post_title' Parameter
High
CVE-2026-15162
Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.