Medium
CVE-2026-12110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-12090
Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter
Medium
CVE-2025-69132
Corpkit - Business Consulting WordPress Theme <= 1.0.5 - Authenticated (Subscriber+) Sensitive Information Exopsure
High
CVE-2026-8082
Bpost Shipping Platform <= 3.2.2 - Unauthenticated SQL Injection
Critical
CVE-2026-9711
EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter
Medium
CVE-2026-8944
Plugin for Google Analytics by IO technologies <= 1.1 - Cross-Site Request Forgery via 'ga_id' Parameter
High
CVE-2026-11349
Modern Events Calendar (Lite & Pro) <= 7.33.0 - Unauthenticated SQL Injection
Medium
CVE-2026-57687
Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-57679
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content <= 1.2.5 - Unauthenticated SQL Injection
Medium
CVE-2026-8825
Elementor <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2026-57683
WP Fast Total Search – The Power of Indexed Search <= 1.80.280 - Unauthenticated SQL Injection
Medium
CVE-2025-69094
Unicamp - University and College WordPress Theme <= 2.2.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-57756
nicen-localize-image <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-13333
Groundhogg <= 4.5.5 - Authenticated (Sales Rep+) SQL Injection via 'query[select]' Parameter
Medium
CVE-2026-57631
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 6.0.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-57644
Restaurant Menu and Food Ordering <= 2.4.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57642
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.8 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57643
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars <= 3.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57653
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57316
GetGenie – AI Content Writer with Keyword Research & SEO Tracking <= 4.4.2 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2026-57318
Site Reviews <= 8.0.11 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2026-57628
WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets <= 4.0.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-57664
Bopo – WooCommerce Product Bundle Builder <= 1.1.6 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-57633
WCBoost – Products Compare <= 1.1.0 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.