Medium
CVE-2026-18943
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-66463
iCARRY <= 2.9 - Unauthenticated Information Exposure
Medium
CVE-2026-18035
User Access Manager <= 2.3.14 - Missing Authorization
High
CVE-2026-18366
Events Manager <= 7.4.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-66469
Arvow AI SEO Writer <= 1.5.3 - Missing Authorization
High
CVE-2026-66661
Directories Pro <= 2.0.5 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-15249
Patterns Kit <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-13613
KiviCare <= 4.5.1 - Authenticated (Authenticated+) SQL Injection
Medium
CVE-2026-14859
Crowdfunding <= 2.2.0 - Missing Authorization
Medium
CVE-2026-11887
Salon Booking System <= 10.30.19 - Missing Authorization to Authenticated (Subscriber+) Booking Approval Bypass
High
CVE-2026-18474
Directory Kit <= 1.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-16538
TeraWallet - Wallet for WooCommerce <= 1.6.9 - Missing Authorization to Authenticated (Subscriber+) Wallet Balance Inflation
High
CVE-2026-66700
Smart Online Order for Clover <= 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66693
Motors – Car Dealership & Classified Listings Plugin <= 1.4.113 - Missing Authorization
High
CVE-2026-66468
Local Delivery Drivers for WooCommerce <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16066
Welcart e-Commerce <= 2.11.33 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-18057
Events Manager <= 7.4.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-61966
WPJAM Basic <= 7.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-66465
Cartify <= 1.3.0.1 - Missing Authorization
High
CVE-2026-66472
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.12 - Unauthenticated SQL Injection
Medium
CVE-2026-18789
Ezoic <= 2.23.0 - Missing Authorization
Medium
CVE-2026-19052
ProSolution WP Client <= 2.0.8 - Missing Authorization
Medium
CVE-2026-66467
FluentCommunity – Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses <= 2.7.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-16737
Travel Engine <= 6.8.4 - Insecure Direct Object Reference to Unauthenticated Booking Details Disclosure and Modification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.