Medium
CVE-2026-17509
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 16
Reset filters
Medium
CVE-2026-12248
WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
Medium
CVE-2025-3488
WPML Multilingual CMS 3.6.0 - 4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode
Critical
CVE-2024-6386
WPML Multilingual CMS <= 4.6.12 - Authenticated (Contributor+) Remote Code Execution via Twig Server-Side Template Injection
Medium
2b2302d9-426c-415b-a7d3-3a9de95d87d1
WPML <= 4.6.0 - Reflected Cross-Site Scripting via wp_lang
Medium
CVE-2022-38461
WPML <= 4.5.10 - Missing Authorization to Settings Change
Medium
CVE-2022-45072
WPML <= 4.5.13 - Cross-Site Request Forgery
Medium
CVE-2022-45071
WPML <= 4.5.13 - Cross-Site Request Forgery
Medium
CVE-2022-38974
WPML <= 4.5.10 - Missing Authorization to Translation Job Status Change
Medium
eb0b9c2b-c536-4697-be4c-7557ba66c2c4
WPML <= 4.5.10 - Unprotected AJAX Actions
High
CVE-2020-10568
WPML < 4.3.7 - Cross-Site Request Forgery Bypass
High
CVE-2018-18069
WPML <= 3.6.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2015-9416
WPML 2.9.3-3.2.6 - Cross-Site Scripting in Accept-Language Header
High
CVE-2015-2791
WPML <= 3.1.9 - Arbitrary Deletion of Content
Critical
CVE-2015-2314
WPML <= 3.1.9 - SQL Injection via lang Parameter
Medium
CVE-2015-2792
WPML < 3.1.8 - Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.