High
CVE-2026-18961
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-66658
Reviewer <= 3.14.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-61969
Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 5.6.0 - Unauthenticated SQL Injection
Medium
CVE-2026-27538
WP Directory Kit <= 1.5.4 - Unauthenticated SQL Injection
High
CVE-2026-66659
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.9 - Unauthenticated SQL Injection
Medium
CVE-2026-18230
Directory Kit <= 1.5.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-66462
WooCommerce Appointments <= 5.3.8 - Unauthenticated Information Exposure
Medium
CVE-2026-16977
Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-66463
iCARRY <= 2.9 - Unauthenticated Information Exposure
Medium
CVE-2026-13613
KiviCare <= 4.5.1 - Authenticated (Authenticated+) SQL Injection
High
CVE-2026-18474
Directory Kit <= 1.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-18057
Events Manager <= 7.4.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-61966
WPJAM Basic <= 7.0.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-66472
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.12 - Unauthenticated SQL Injection
High
CVE-2026-66478
Church Admin <= 5.1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-66444
Payment Forms for Paystack <= 4.0.5 - Authenticated (Subscriber+) Information Exposure
Medium
c3f9898b-0aa0-4dd1-9298-96c853dbef5c
WordPress Core <= 7.0.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds
Medium
CVE-2026-14238
Vitepos <= 3.5.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66446
If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-66458
RealPress – Real Estate Plugin <= 1.1.2 - Unauthenticated SQL Injection
High
CVE-2026-66436
Active Woot Products Tables for WooCommerce. 100% FREE <= 1.1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-66432
WPJAM Basic <= 7.0.2.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-66460
AfterShip Tracking <= 1.18.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-66443
REST API Log <= 1.7.1 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.