High
CVE-2026-27048
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2026-27040
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-45211
APIExperts Square for WooCommerce <= 4.7.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2026-25470
ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 - Unauthenticated Remote Code Execution
Medium
CVE-2026-32583
Modern Events Calendar <= 7.32.0 - Missing Authorization
Medium
CVE-2026-32462
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-25471
Admin Safety Guard — Login Security & 2FA <= 1.2.9 - Missing Authorization
Low
CVE-2026-25002
LearnPress – Sepay Payment <= 4.0.0 - Missing Authorization
High
CVE-2026-24978
Jobica Core <= 1.4.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-27041
Unlimited Elements for Elementor (Premium) <= 1.4.72 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2026-27047
Curly Core <= 2.1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-27044
TotalPoll for Polls and Contests <= 4.12.0 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-27049
Jobica Core <= 1.4.2 - Missing Authorization
Medium
CVE-2026-32587
WP Easy Pay – Payment and Donation form Builder for Square <= 4.2.11 - Missing Authorization
Medium
CVE-2026-24975
Organici Library <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-24979
Jobica Core <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-27046
StoreCustomizer – A plugin to Customize all WooCommerce Pages <= 2.6.3 - Missing Authorization
Medium
CVE-2026-24980
Visionary Core <= 1.4.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-24973
Support for CitiLights - Real Estate WordPress Theme <= 3.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-27039
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-24976
Organici Library <= 2.1.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-39496
YayMail <= 4.3.3 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2026-32461
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.5.7 - Missing Authorization
Medium
CVE-2026-40740
Tutor LMS <= 3.9.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.