Critical
CVE-2026-6443
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2023-54358
Travel & Tours Meta Search <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-5742
UsersWP <= 1.2.60 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Badge Link Substitution
Critical
CVE-2026-1830
Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload
Medium
CVE-2026-4336
Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content
Medium
CVE-2026-5357
Download Manager <= 3.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2026-5711
Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute
High
CVE-2026-5436
MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys
Medium
CVE-2026-0811
Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion
Medium
CVE-2026-0814
Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
Critical
CVE-2026-2942
ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
High
CVE-2026-39555
Askka - Candle Shop WordPress Theme <= 1.3.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-45215
EasyPay <= 4.3.0 - Unauthenticated Information Exposure
Medium
CVE-2026-2519
Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'
Critical
CVE-2026-39587
WP BASE Booking of Appointments, Services and Events <= 5.9.0 - Unauthenticated Privilege Escalation
High
CVE-2026-39522
Solene <= 3.4 - Unauthenticated Local File Inclusion
Critical
d7261e93-2341-4e14-a9b3-8fec295f6cde
Smart Slider 3 Pro 3.5.1.35 - Backdoor Embedded via Supply Chain Compromise
High
CVE-2026-39550
Aperitif <= 1.6 - Unauthenticated PHP Object Injection
High
CVE-2026-39523
Solene Core <= 2.3.2 - Unauthenticated Local File Inclusion
High
CVE-2026-39559
Uppercase < 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2026-39549
Aperitif <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-39560
Hiroshi <= 1.5.1 - Unauthenticated PHP Object Injection
High
CVE-2026-39568
Mr. SEO <= 2.0 - Unauthenticated Local File Inclusion
High
CVE-2026-39552
Blueprint < 1.1.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.