High
CVE-2026-54823
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-54816
Advanced Ads – Ad Manager & AdSense <= 2.0.21 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-54814
Motors – Car Dealership & Classified Listings Plugin <= 1.4.109 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2026-54193
Avada (Fusion) Builder <= 3.15.4 - Authenticated (Contributor+) Arbitrary File Deletion
Critical
CVE-2026-12375
Uncanny Automator Pro 7.3.0.5 - Maliciously Injected Backdoor
Critical
CVE-2026-4375
DoLeads Integrator <= 1.2.2 - Unauthenticated Remote Code Execution
High
CVE-2026-8442
WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
Medium
CVE-2026-15284
King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'form_page_id' Parameter
High
CVE-2026-6933
Premmerce Dev Tools <= 2.0 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution via Plugin Creation
High
CVE-2016-20077
Photocart Link <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2016-20080
Brandfolder – Digital Asset Management Simplified. <= 3.0 - Unauthenticated Local File Inclusion
High
CVE-2024-6228
WANotifier <= 2.5 - Unauthenticated Local File Inclusion
Critical
CVE-2026-52705
Sigma Forms Pro <= 1.4.5 - Unauthenticated Arbitrary File Upload
High
CVE-2026-52704
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.8 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2026-11962
FileOrganizer <= 1.1.0 - Authenticated (Authenticated+) Local File Inclusion
Critical
CVE-2026-52716
Workscout Core <= 1.7.11 - Unauthenticated Arbitrary File Deletion
High
CVE-2016-20078
IMDB Profile Widget <= 1.0.8 - Unauthenticated Local File Inclusion
High
CVE-2016-20076
Simple-Backup <= 2.7.11 - Unauthenticated Arbitrary File Download
High
CVE-2026-6382
Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution
High
CVE-2016-20079
Dharma Booking <= 2.28.3 - Unauthenticated Local File Inclusion
High
CVE-2016-20081
HB Audio Gallery Lite <= 1.0.0 - Unauthenticated Arbitrary File Download
High
CVE-2016-20075
Ultimate Product Catalog <= 4.4.48 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2026-46698
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-69131
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.