Medium
CVE-2026-14955
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-16060
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2025-15673
Import and export users and customers < 2.4.3 - Authenticated (Admin+) Arbitrary File Read
Critical
CVE-2026-16618
ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-65562
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-17032
Multiple Supsystic Pro Plugins <= 1.6.0 - Backdoored Software via Compromised Vendor Software
Critical
CVE-2026-16250
Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload
High
CVE-2026-65558
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking <= 2.3.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-15420
Nexter Blocks <= 5.0.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary CSS/JS File Deletion via 'plus_name' Parameter
High
CVE-2026-65516
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-59552
3D Flipbook PDF Viewer & Embedder <= 1.4.2 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-15017
MDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' Handlers
Medium
CVE-2026-15786
WP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter
Medium
CVE-2026-16078
WCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' Parameter
Critical
CVE-2026-14282
GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field
High
CVE-2026-7232
FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters
High
CVE-2026-65466
JetBooking <= 4.1.2 - Authenticated (Custom+) Server-Side Request Forgery
High
CVE-2026-65461
Really Simple CSV Importer <= 1.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2026-27064
Mailster - Email Newsletter Plugin for WordPress <= 4.1.17 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2026-65467
JetEngine <= 3.8.11 - Authenticated (Contributor+) Sever-Side Request Forgery
High
CVE-2026-59542
Kali Forms — Contact Form & Drag-and-Drop Builder <= 2.4.18 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-65455
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2026-59555
Participants Database <= 2.7.8.3 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-24639
Photo Block – A Modern Image Block With Lightbox and Caption Support <= 1.7.1 - Authenticated (Author+) Sever-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.