High
CVE-2026-7444
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-5651
Askeet <= 3.0 - Authenticated (Administrator+) SQL Injection via 'sql_query' Parameter
Medium
CVE-2026-5062
PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Medium
CVE-2026-11421
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter
High
CVE-2026-17506
Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-17017
CubeWP Framework <= 1.1.30 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-17541
Bit File Manager <= 6.9.0 - Unauthenticated File Activity Log Disclosure
Medium
CVE-2026-14928
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-15381
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map < 10.1.04 - Unauthenticated SQL Injection
Medium
CVE-2026-17542
Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-12376
Academy LMS <= 3.8.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16295
Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer < 2.4.3 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-17044
File Upload <= 5.1.7 - Unauthenticated SQL Injection
Medium
CVE-2026-15235
MotoPress Hotel Booking < 6.0.4 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16282
Appointment Hour Booking <= 1.5.87 - Unauthenticated Price Manipulation
High
CVE-2026-18473
Directory Kit <= 1.5.4 - Unauthenticated SQL Injection
Medium
CVE-2025-15674
Content Protector (Passster) <= 4.3.6 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-15361
Content Views <= 4.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-13154
Essential Blocks <= 6.3.0 - Unauthenticated Information Exposure
Medium
CVE-2026-13153
Essential Blocks <= 6.3.0 - Unauthenticated Information Exposure
High
CVE-2026-13395
Online Scheduling and Appointment Booking System – Bookly < 27.8 - Unauthenticated SQL Injection
Medium
CVE-2026-16590
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Contact Message and User Data Disclosure
Medium
CVE-2026-16589
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-13703
SEO Redirection Plugin – 301 Redirect Manager <= 9.18 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.