Medium
CVE-2026-14231
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Low
CVE-2026-16954
AI Engine <= 3.6.3 - Authenticated (Editor+) Information Exposure
Medium
CVE-2026-15153
WP Hotel Booking < 2.3.2 - Authenticated (Custom role+) SQL Injection
Medium
CVE-2026-14240
Tourmaster <= 5.4.8 - Unauthenticated Information Exposure
Medium
CVE-2026-18050
Events Manager <= 7.3 - Unauthenticated Pending Upload Disclosure
Medium
CVE-2026-14226
Easy Appointments < 3.12.28 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16092
Improved Save Button <= 1.2.1 - Authenticated (Author+) Second-Order SQL Injection via 'meta_key' Parameter
High
CVE-2026-15360
Ajax Load More <= 8.0.0 - Unauthenticated SQL Injection
Medium
CVE-2026-66696
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.7.8 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-17515
MLS Import <= 7.0.3 - Authenticated (Subscriber+) Information Exposure
High
76fb0ffd-32c1-483d-ae95-9bc70ba1c064
Advanced Shipment Tracking for WooCommerce <= 3.9 - Authenticated (Shop Manager+) SQL Injection via 'tracking_provider' Parameter
Medium
CVE-2026-11973
WP-Lister Lite for eBay <= 3.8.8 - Authenticated (Shop Manager+) SQL Injection via 'orderby' Parameter
Medium
CVE-2026-15344
WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter
Medium
CVE-2026-65523
Formidable Forms Signature Online Contract Automation <= 2.0.1 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-65546
Qode Tours <= 3.1.3.1 - Unauthenticated SQL Injection
Medium
CVE-2026-65547
Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-65520
WP OAuth Server ( Login with WordPress ) <= 6.2.0 - Unauthenticated SQL Injection
Medium
CVE-2026-65543
Vimeo <= 1.2.2 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-65508
Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection
Medium
CVE-2026-15444
Tutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' Parameter
High
CVE-2026-10207
PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
High
CVE-2026-14785
Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection
Medium
CVE-2026-15304
Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-15267
Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.