Critical
CVE-2026-12872
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-65582
AI Hub - Startup & Technology WordPress Theme <= 1.3.10 - Authenticated (Subscriber+) Arbitrary File Dowload
High
CVE-2026-14860
Podcast Player <= 8.3.0 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-12971
LearnPress <= 4.4.3 - Authenticated (Instructor+) Server-Side Request Forgery
Medium
CVE-2026-13170
Eventin <= 4.1.19 - Authenticated (Editor+) Local File Inclusion
High
CVE-2026-16985
Squeeze <= 1.7.11 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2026-15991
File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter
Medium
CVE-2026-18470
Login & Register Forms <= 4.0.1 - Unauthenticated Registered User Email Address Disclosure
Medium
CVE-2026-17012
Restore PayPal Standard for WooCommerce <= 3.1.2 - Unauthenticated Payment Verification Bypass
Critical
CVE-2026-66665
Type Hub <= 2.0.6 - Unauthenticated Arbitrary File Upload
High
CVE-2026-66710
E2Pdf – Export Pdf Tool for WordPress <= 1.32.40 - Unauthenticated Local File Inclusion
High
7bbead7c-47b9-473f-b335-6fae4b5998d6
Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal
High
CVE-2026-6147
LightSync Pro <= 2.1.6 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2026-7693
Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter
Medium
CVE-2026-7726
Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Template Cache Manipulation via 'handle_sync' AJAX Action
High
CVE-2026-15979
Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2026-11421
ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter
High
CVE-2026-18322
Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator
High
CVE-2026-13392
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor < 3.10.01 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2026-17540
Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2026-66709
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels <= 6.6.42 - Authenticated (Shop Manager+) Remote Code Execution
Medium
CVE-2026-16955
AI Engine <= 3.6.5 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2026-16282
Appointment Hour Booking <= 1.5.87 - Unauthenticated Price Manipulation
Critical
CVE-2026-73532
Fluent Forms Pro 6.2.7 & Ninja Tables Pro 5.2.13 - Remote Code Execution via Backdoor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.