Medium
CVE-2026-93662
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-95600
TrustedLogin Connector <= 2.0.3 - Unauthenticated Information Exposure
Medium
CVE-2026-9004
WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter
Medium
CVE-2026-94117
HashBar – Announcement, Notification Bar & Popup Campaign <= 2.0.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-90985
WPC Smart Compare for WooCommerce <= 6.6.0 - Unauthenticated Information Exposure
Medium
CVE-2026-84741
The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Information Exposure
Medium
CVE-2026-89331
FluentBoards 1.95 - 2.0.15 - Unauthenticated Information Exposure
Medium
CVE-2026-91024
Booking Manager <= 2.1.20 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-88929
Sale Booster 7.0.0 - 7.5.1 - Unauthenticated Information Exposure
High
CVE-2022-4997
JetFormBuilder Stripe Gateway <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2026-86783
PostX <= 5.0.40 - Unauthenticated Information Exposure
Medium
CVE-2026-93528
NP Quote Request for WooCommerce <= 2.4.15 - Unauthenticated Information Exposure
Medium
CVE-2026-86602
Recipe Maker 10.3.0 - 10.8.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-84168
Easy Hide Login <= 1.6 - Unauthenticated Information Exposure
Medium
CVE-2026-86603
Recipe Maker <= 10.8.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-84026
Directorist 8.1 - 8.9.4 - Unauthenticated Information Exposure
Medium
CVE-2026-18365
Zportals <= 6.4.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-87848
MPCX Lightbox 1.2.2 - 1.2.5 - Unauthenticated Information Exposure
Medium
CVE-2026-6295
WP Optimizer <= 2.5.0 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Medium
CVE-2026-13200
Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter
Medium
CVE-2026-13191
Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter
Medium
CVE-2026-75959
GoPay for WooCommerce <= 1.0.34 - Authenticated (Shop Manager+) SQL Injection via 'log_table_filter' Parameter
Medium
CVE-2026-9232
Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Contributor+) Sensitive Customer Information Exposure via ea_get_customers_ajax AJAX Action
Medium
CVE-2026-9855
Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.