Medium
CVE-2026-14926
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2026-57380
Extensions for Leaflet Map <= 5.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57364
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More <= 2.2.0 - Unauthenticated Business Logic Flaw
Medium
CVE-2026-14821
Quiz And Survey Master <= 11.1.4 - Missing Authorization
High
CVE-2026-57379
Contact Form to Chat Apps | Click to Chat to Order – FormyChat <= 2.15.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57368
Noo JobMonster <= 4.8.5 - Reflected Cross-Site Scripting
High
CVE-2026-57381
Property Hive <= 2.2.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14870
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Reflected Cross-Site Scripting
High
CVE-2026-57386
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder < 2.9.1 - Authenticated (Contributor+) Privilege Escalation
High
CVE-2026-57374
FunnelKit Funnel Builder Pro <= 3.15.0.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13692
PayU CommercePro < 3.9.0 - Missing Authorization
Medium
CVE-2026-57370
Visitor Traffic Real Time Statistics pro <= 11.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-14842
Events Made Easy <= 3.1.1 - Unauthenticated Payment Bypass
Medium
CVE-2026-13605
Photo Swipe <= 4.1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-57382
Simple File List <= 6.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-59521
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials <= 3.1.15 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2026-14345
WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter
Medium
CVE-2026-11328
Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Medium
CVE-2026-57745
RT-Theme 18 Responsive WordPress Theme <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-14190
Sina Extension for Elementor <= 3.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-57740
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization
Critical
CVE-2026-14289
FacturaONE <= 5.36 - Unauthenticated Remote Code Execution
High
CVE-2026-13400
Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-12394
MemberGlut <= 1.1.4 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.