Critical
CVE-2026-28192
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-53345
Thim Core <= 2.3.3 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2026-61980
OMGF Pro <= 5.2.7 - Unauthenticated Arbitrary File Download
Critical
CVE-2026-28189
Participants Database <= 2.7.8.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2026-18039
Essential Addons for Elementor <= 6.7.1 - Unauthenticated Privilege Escalation
High
CVE-2026-19091
GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision
Critical
CVE-2026-16230
Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field
High
CVE-2026-13457
InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure
High
CVE-2026-66653
Barista <= 2.5.1 - Unauthenticated Local File Inclusion
High
CVE-2026-66656
Foton Core <= 1.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-16739
Epeken All Kurir for Woocommerce <= 2.1.2 - Unauthenticated Payment Bypass
Critical
CVE-2026-27544
QA Assistants – Driven by data <= 5.2.0.0 - Unauthenticated Remote Code Execution
High
CVE-2026-66657
Biagiotti Core <= 2.1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2026-61962
WP BASE Booking of Appointments, Services and Events <= 6.3.0 - Unauthenticated Remote Code Execution
Medium
CVE-2026-66654
Vehica Core <= 1.0.104 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2026-15039
Gift Cards For WooCommerce Pro <= 4.2.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-19050
ProSolution WP Client <= 2.0.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2026-18048
Photo Album Plus <= 9.2.07.1 - Arbitrary File Deletion to Unauthenticated Arbitrary ZIP File Deletion
High
CVE-2026-66704
Gutenverse Companion <= 2.5.1 - Unauthenticated Server-Side Request Forgery
Medium
cddbb0f8-fc73-46d7-80af-edb69227084f
WordPress Core <= 7.0.2 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Medium
CVE-2026-19075
All-in-One Video Gallery <= 4.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2026-66450
Geo Mashup <= 1.13.18 - Unauthenticated Local File Inclusion
Critical
CVE-2026-19089
Product Input Fields for WooCommerce <= 2.0.1 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.