Medium
CVE-2026-9228
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-2374
Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF
Medium
CVE-2026-5737
Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery via Tracking Route
High
CVE-2026-7802
Frontend Admin by DynamiApps <= 3.29.2 - Missing Authorization to Authenticated (Subscriber+) Account Takeover via 'user_id' URL Query Parameter
Medium
CVE-2026-9241
FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
Medium
CVE-2026-4888
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending
Medium
CVE-2026-49053
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 3.9.6 - Missing Authorization
High
CVE-2025-69166
Gunslinger <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69161
Snowy <= 1.13 - Unauthenticated Local File Inclusion
High
CVE-2025-69167
Eros <= 1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-8089
weMail <= 2.1.2 - Reflected Cross-Site Scripting
High
CVE-2025-69172
Resurs <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-69177
Roneous - Creative Multi-Purpose WordPress Theme <= 2.1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69173
Tipsy <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-48971
Product Import Export for WooCommerce – Import Export Product CSV Suite <= 2.5.6 - Missing Authorization
High
CVE-2025-69176
ITactics <= 1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-8682
3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint
Medium
CVE-2026-42736
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference
High
CVE-2025-69162
Grecko <= 5.17 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49047
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.4.29 - Missing Authorization
Medium
CVE-2026-49051
WP Meta and Date Remover <= 2.3.6 - Missing Authorization
Medium
b061facb-0411-4b81-adbd-b1419b7210df
Advanced Custom Fields (ACF®) <= 6.8.1 - Missing Authorization
Medium
CVE-2026-9570
Taskbuilder <= 5.0.7 - Reflected Cross-Site Scripting
High
CVE-2025-69170
Eventicity <= 1.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.