Medium
CVE-2026-75980
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-19952
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag
Critical
CVE-2026-75865
WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint
High
CVE-2026-82852
MapSVG – Vector maps, Image maps, Google Maps <= 8.15.0 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-17563
User Frontend <= 4.3.10 - Missing Authorization to Unauthenticated Post Creation
High
CVE-2026-81766
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) < 9.8.0 - Authenticated (Custom Role+) Remote Code Execution
Medium
CVE-2026-77794
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
High
CVE-2026-16947
Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2026-82970
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2026-66047
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force
High
CVE-2026-10195
FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting
Medium
CVE-2026-77793
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
Medium
CVE-2026-16966
Solace Extra < 1.7.0 - Missing Authorization to Unauthenticated Unpublished Site Builder Content Disclosure
High
CVE-2026-19722
WPvivid — Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2026-82607
Profile Builder < 3.16.1 - Unauthenticated Limited File Upload
Medium
CVE-2026-16600
SmartAIPress <= 1.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2026-17565
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates < 2.7.2 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-74851
Pods – Custom Content Types and Fields < 3.3.9.1 - Authenticated (Author+) Remote Code Execution
Critical
CVE-2026-12513
Shared Files Pro < 1.7.68 & Shared Files Free < 1.7.67 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-19093
Tutor LMS – eLearning and online course solution < 4.0.6 - Authenticated (Custom Role+) Arbitrary File Read
Critical
CVE-2026-81780
Hash Form – Drag & Drop Form Builder <= 1.4.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-19715
WP OAuth Server ( Login with WordPress ) < 6.3.1 - Unauthenticated Information Exposure
Critical
CVE-2026-82222
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.7.1 - Unauthenticated PHP Object Injection to Remote Code Execution
Critical
CVE-2026-14494
Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.