Medium
CVE-2026-1671
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
High
CVE-2025-69405
Lorem Ipsum | Books & Media Store <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-68526
Modal Popup Box <= 1.6.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-69400
Yokoo <= 1.1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69404
Extreme Store <= 1.5.7 - Unauthenticated PHP Object Injection
High
CVE-2026-22344
FiveStar <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69409
PJ | Life & Business Coaching <= 3.0.0 - Unauthenticated Local File Inclusion
High
CVE-2026-39623
Biolife <= 3.2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-69329
Prestige < 1.4.1 - Unauthenticated PHP Object Injection
High
CVE-2025-69395
Gable <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-68536
Zota <= 1.3.14 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24959
JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-69399
Cobble <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-68545
Nika <= 1.2.14 - Unauthenticated Local File Inclusion
High
CVE-2025-68539
Fana <= 1.1.35 - Unauthenticated Local File Inclusion
High
CVE-2025-68543
Diza <= 1.3.15 - Unauthenticated Local File Inclusion
High
CVE-2025-69402
R&F <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-22345
Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery <= 1.6.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-69398
Plank <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69396
Splendour <= 1.23 - Unauthenticated Local File Inclusion
High
CVE-2026-22346
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.5.4 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-68514
Paid Member Subscriptions <= 2.16.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2026-1104
FastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.