Medium
CVE-2026-103336
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-62071
Iptanus File Upload <= 5.1.10 - Unauthenticated SQL Injection
Medium
CVE-2026-92923
Unlimited Elements For Elementor 1.5.142 - 2.0.20 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-86832
MetForm <= 4.3.0 - Unauthenticated Information Exposure
High
CVE-2026-89236
SaveTo Wishlist Lite <= 1.1.4 - Unauthenticated SQL Injection
High
CVE-2026-85568
Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQL Injection
Medium
CVE-2026-96962
Pie Register <= 3.8.4.13 - Unauthenticated Information Exposure
Medium
CVE-2026-86834
MetForm 2.2.1 - 4.3.0 - Unauthenticated Information Exposure
Medium
CVE-2026-80518
Ultimate CSV Importer <= 9.1 - Unauthenticated Information Exposure
High
CVE-2026-93882
LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter
Medium
CVE-2026-92548
WP Popular Posts <= 7.4.2 - Unauthenticated Information Disclosure in 'post_type' and 'context' Parameters
High
CVE-2026-92245
Simply Schedule Appointments <= 1.6.12.32 - Missing Authorization to Unauthenticated Sensitive Information Exposure and Arbitrary Appointment Deletion via 'recursive' Parameter on the appointment_types REST Endpoint via Public Nonce
Medium
CVE-2026-92537
Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)
Medium
CVE-2026-94115
Pricing Table WordPress Plugin – Easy Pricing Tables <= 4.1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-62085
WP Activity Log <= 5.6.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-97317
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure
Medium
CVE-2026-97302
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO <= 4.2.3 - Unauthenticated Information Exposure
Medium
b3a4ff32-52a8-4bb0-8bf6-536a89d338e9
WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field
Medium
CVE-2026-97293
Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-62097
Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-94082
Quiz Cat – WordPress Quiz Plugin <= 3.1.1 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-97287
Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-97261
Notivo Notification for WooCommerce <= 1.4.2 - Unauthenticated Information Exposure
Medium
CVE-2026-94298
BuildKit <= 1.0.28 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.