Medium
CVE-2026-8385
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-10835
SALESmanago & Leadoo <= 3.11.2 - Unauthenticated SQL Injection
High
CVE-2026-49079
JetSearch <= 3.5.17 - Unauthenticated SQL Injection
Medium
CVE-2026-49082
Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons <= 1.4.8 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-49077
Wp EMember <= v10.2.2 - Unauthenticated Information Exposure
Medium
CVE-2026-32834
Easy PayPal Events & Tickets <= 1.3 - Unauthenticated Information Exposure
High
CVE-2019-25745
WP Google Review Slider <= 6.1 - Unauthenticated SQL Injection
High
CVE-2026-49776
GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites <= 2.32.6 - Unauthenticated SQL Injection
Medium
CVE-2026-49771
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-8653
MasterStudy LMS Pro Plus <= 4.8.20 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter
Medium
CVE-2026-49056
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.4 - Unauthenticated Information Exposure
Medium
CVE-2026-48965
Backup, Restore and Migrate your sites with XCloner <= 4.8.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-48967
Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2026-5076
ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation
Medium
CVE-2026-5074
ARMember Premium <= 7.3.1 - Authenticated (Subscriber+) SQL Injection via 'sSortDir_0' Parameter
High
CVE-2026-5073
ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection via 'order' Parameter
Medium
CVE-2026-48874
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.8.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-48875
JetSmartFilters <= 3.8.1 - Unauthenticated SQL Injection
Medium
CVE-2026-48878
Visual Link Preview <= 2.4.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-5336
Dataverse Integration <= 2.90 - Authenticated (Contributor+) Server-Side Template Injection to Information Exposure
Medium
CVE-2026-48964
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-48886
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.9 - Unauthenticated SQL Injection
Medium
CVE-2026-48882
WP Time Slots Booking Form <= 1.2.50 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-9048
Slider Revolution 7.0.0 - 7.0.14 - Incorrect Authorization to Authenticated (Contributor+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.