Medium
CVE-2026-32467
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-14825
Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference
High
CVE-2026-12983
Dinatur <= 1.18 - Unauthenticated SQL Injection
Medium
CVE-2026-28569
SSL Zen — SSL Certificate Installer & HTTPS Redirects <= 4.7.43 - Reflected Cross-Site Scripting
High
CVE-2026-32444
Cwicly <= 1.4.4 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-14196
WCFM Marketplace <= 3.8.0 - Insecure Direct Object Reference to Authenticated (Store vendor+) Cross-Vendor Review Deletion and Status Update
Medium
CVE-2026-19055
ProSolution WP Client < 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2026-14861
User Verification <= 2.0.47 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-14287
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13169
Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Event Modification, Deletion and Ownership Takeover
Medium
CVE-2026-19056
ProSolution WP Client < 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2026-13175
Eventin <= 4.1.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Schedule Deletion and Modification
Medium
CVE-2026-18356
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention < 3.3.5 - Unauthenticated Username Denylist Bypass
Medium
CVE-2026-14826
Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference
Critical
CVE-2026-12277
Frontend File Manager <= 23.6 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2024-13784
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection
High
CVE-2026-10734
Infility Global <= 2.15.34 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint
Medium
CVE-2026-18347
Kirki <= 6.1.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'context' Parameter
High
CVE-2026-13424
Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX action
Medium
CVE-2026-17604
Kirki <= 6.1.1 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter
High
CVE-2026-2497
Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys
Medium
CVE-2026-12998
Forminator Forms <= 1.55.0.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'draft' Parameter
High
CVE-2026-17087
WP Travel Engine <= 6.8.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'booking_id' Parameter
Medium
CVE-2026-17608
WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.