High
CVE-2026-11590
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2017-20249
Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-8444
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
High
CVE-2026-52693
eCommerce Product Catalog Plugin for WordPress <= 3.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-9576
Fluent Booking <= 2.1.1 - Authenticated (Calendar Manager+) Information Exposure
Medium
CVE-2026-11581
Kali Forms <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2017-20245
Wow Viral Signups <= 2.1 - Unauthenticated SQL Injection
High
CVE-2026-11589
Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2017-20250
Mac Photo Gallery <= 3.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2017-20246
KittyCatfish <= 2.2 - Unauthenticated SQL Injection
High
CVE-2017-20243
Car Park Booking System <= 1.0 - Unauthenticated SQL Injection
High
CVE-2017-20248
Apptha Slider Gallery <= 1.0 - Unauthenticated Arbitrary File Download
Medium
CVE-2026-49068
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.8.1 - Authenticated (Subscriber+) Information Exposure
High
CVE-2016-20062
Simply Poll <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2026-4058
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation
High
CVE-2026-8365
Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field
Medium
CVE-2026-8677
Prime Elementor Addons <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget HTML Tag Settings
Medium
CVE-2026-8599
MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field
Medium
CVE-2026-7542
Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure
High
CVE-2026-11616
Events Calendar for GeoDirectory <= 2.3.28 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-11603
Product Filter Widget for Elementor <= 1.0.6 - Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter
Medium
CVE-2026-8895
kk blog card <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2026-10553
jQuery Hover Footnotes <= 1.4 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2026-10738
jQuery Hover Footnotes <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.