Critical
CVE-2026-65553
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-6089
WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery
Critical
CVE-2026-14900
Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter
High
CVE-2026-12476
Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter
Medium
CVE-2026-17161
WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute
High
CVE-2026-14553
Zportals <= 6.3.3 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-65520
WP OAuth Server ( Login with WordPress ) <= 6.2.0 - Unauthenticated SQL Injection
High
CVE-2026-65548
Betheme <= 28.5.7 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-5114
SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read
Medium
CVE-2026-4912
Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2026-12124
PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameter
Medium
CVE-2026-15012
Demi <= 0.0.8 - Unauthenticated Information Exposure to Arbitrary Directory Copy
Critical
CVE-2026-14490
Demi <= 0.0.6 - Unauthenticated Arbitrary Directory Deletion via demi_restore_step AJAX action
High
CVE-2026-16585
Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter
High
CVE-2026-61953
Simple Link Directory Pro <= 15.0.6 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-10526
EmbedPress <= 4.6.0 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2026-66476
Easy Digital Downloads <= 3.6.9 - Authenticated (Admin) Arbitrary File Deletion
High
CVE-2026-65442
FormCraft <= 3.9.15 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-14939
Visualizer: Tables and Charts Manager <= 4.0.5 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2026-16940
Custom Fields for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-16067
Event Booking Manager for WooCommerce (Pro) <= 5.0.2 - Unauthenticated Price Manipulation
Critical
CVE-2026-16548
Bit Assist <= 1.8.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-66437
Feedzy <= 5.2.4 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-16536
Simple Google Calendar Outlook Events Widget <= 3.0.0 - Unauthenticated Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.