High
CVE-2026-59538
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-59549
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Unauthenticated SQL Injection
High
CVE-2026-59526
MapSVG <= 8.14.0 - Unauthenticated SQL Injection
Medium
CVE-2026-65535
TinyMCE Templates <= 4.8.1 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-59551
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-65526
Visualizer – Tables & Charts Manager with Built-in AI Generator <= 4.0.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-59527
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Unauthenticated SQL Injection
High
CVE-2026-59550
AWP Classifieds <= 4.4.7 - Unauthenticated SQL Injection
Medium
CVE-2026-59529
Ebook Store <= 6.19 - Unauthenticated Information Exposure
Medium
CVE-2026-27372
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Information Exposure
Medium
CVE-2026-65494
Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-65532
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.2.2 - Authenticated (Shop manager+) SQL Injection
High
CVE-2026-16532
Link Library <= 7.9.2 - Unauthenticated SQL Injection
Medium
CVE-2026-65521
WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets <= 4.3.0 - Unauthenticated Information Exposure
Medium
CVE-2026-15448
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' Parameter
Medium
CVE-2026-13119
Registrations for the Events Calendar <= 3.2 - Authenticated (Contributor+) SQL Injection via 'standard' Parameter
Medium
CVE-2026-13009
AI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter
Medium
CVE-2026-15761
Tickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' Parameter
Medium
CVE-2026-15906
Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter
High
CVE-2026-9713
Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload
Medium
CVE-2026-65505
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Unauthenticated Information Exposure
Medium
CVE-2026-65498
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Unauthenticated Information Exposure
Medium
CVE-2026-65474
Ninja Tables – Easy Data Table Builder <= 5.2.10 - Unauthenticated Information Exposure
Medium
CVE-2026-65490
Create <= 2.6.0 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.