Medium
CVE-2026-56052
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-9620
WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute
Medium
CVE-2026-9612
WhatsOrder <= 1.0.1 - Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs
High
CVE-2026-9179
WP Forms Connector <= 1.8 - Unauthenticated SQL Injection via 'order' Parameter
Medium
CVE-2026-9183
24liveblog <= 2.2 - Authenticated (Contributor+) Exposure of Sensitive Information via Block Editor Script Localization
High
CVE-2026-8705
ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection
High
CVE-2026-56036
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.5.6 - Unauthenticated SQL Injection
Critical
CVE-2026-13142
Social Login, Passkeys, Magic Link & Email OTP < 1.4.1 - Unauthenticated Account Takeover via OTP Brute Force
High
CVE-2026-56034
Library Management System <= 3.5.7 - Unauthenticated SQL Injection
High
CVE-2026-12582
Library Management System <= 3.5.7 - Unauthenticated SQL Injection
Medium
CVE-2026-12397
Job Portal <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Email Disclosure
Medium
CVE-2026-9013
Bogo <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via REST API
Medium
CVE-2026-54838
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.8 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-54849
Premmerce Wishlist for WooCommerce <= 1.1.11 - Unauthenticated SQL Injection
Medium
CVE-2026-54839
Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups <= 2.0.9 - Unauthenticated Information Exposure
Medium
CVE-2026-54841
Vitepos – Point of Sale (POS) for WooCommerce <= 3.4.2 - Unauthenticated Information Exposure
High
CVE-2026-54843
MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection
High
CVE-2026-54836
YMC Filter <= 3.11.5 - Unauthenticated SQL Injection
Medium
CVE-2026-11571
Everest Forms <= 3.4.0 - Unauthenticated Information Exposure
Medium
CVE-2026-56012
Media Library Assistant <= 3.35 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-54848
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce <= 4.7.3 - Unauthenticated Information Exposure
Medium
CVE-2026-12111
Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter
Medium
CVE-2026-10736
Tutor LMS <= 3.9.11 - Authenticated (Administrator+) SQL Injection via 'data' Parameter
Medium
CVE-2026-11360
Advanced Order Export For WooCommerce <= 4.0.10 - Authenticated (Shop Manager+) SQL Injection via 'sort_direction' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.