Medium
80f92f7f-72e7-4d83-9ceb-ed0e11fb8003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Medium
5faaf7d1-2012-42d5-affa-a5ff3388d25a
WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Emoji Settings Element
Medium
CVE-2026-9676
f4 Post Tree <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Parent/Menu Order Modification
Medium
CVE-2026-64638
WordPress Core <= 7.0.2 - Unauthenticated Reflected Cross-Site Scripting via log Parameter
Critical
CVE-2026-14526
AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route
Medium
CVE-2026-66461
SMEPay: UPI Gateway for WooCommerce <= 1.0.5 - Missing Authorization
Medium
CVE-2026-14238
Vitepos <= 3.5.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66446
If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-14237
Vitepos <= 3.5.0 - Authenticated (Outlet Manager+) Privilege Escalation
Medium
CVE-2026-66455
ReactPress – Create React App for WordPress <= 3.4.0 - Missing Authorization
Medium
CVE-2026-19075
All-in-One Video Gallery <= 4.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2026-66459
SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) <= 2.4.2 - Missing Authorization
High
CVE-2026-66458
RealPress – Real Estate Plugin <= 1.1.2 - Unauthenticated SQL Injection
High
CVE-2026-66436
Active Woot Products Tables for WooCommerce. 100% FREE <= 1.1.1 - Unauthenticated SQL Injection
High
CVE-2026-14293
Autopay / Blue Media for WooCommerce <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66426
WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66456
Profile Extra Fields by BestWebSoft <= 1.3.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2026-18786
CheckView <= 2.3.1 - Unauthenticated REST API Authorization Bypass to Privilege Escalation
Medium
CVE-2026-66432
WPJAM Basic <= 7.0.2.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-18988
Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute
Medium
CVE-2026-66460
AfterShip Tracking <= 1.18.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-19077
Copy & Delete Posts <= 1.5.4 - Missing Authorization
Medium
CVE-2026-66443
REST API Log <= 1.7.1 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.