Medium
CVE-2026-41563
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-42413
Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 - Unauthenticated Information Exposure
Medium
CVE-2026-25434
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden <= 3.5.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-39729
Edwiser Bridge – WordPress Moodle Integration <= 4.3.4 - Unauthenticated Information Exposure
High
CVE-2026-39746
Booknetic <= 4.8.5 - Unauthenticated SQL Injection
Medium
CVE-2026-39747
Woffice CRM <= 5.4.35 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-39783
Polylang <= 3.8.7 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-104385
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.8.3 - Unauthenticated Information Exposure
Medium
CVE-2026-102387
XServer Migrator <= 1.6.6 - Unauthenticated Information Exposure
Medium
CVE-2026-105073
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Information Exposure
Medium
CVE-2026-104399
Motors – Car Dealership & Classified Listings Plugin <= 1.4.124 - Unauthenticated Information Exposure
Medium
CVE-2026-105317
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-105071
SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 - Unauthenticated Information Exposure
Medium
CVE-2026-104389
Image Optimizer, Resizer and CDN – Sirv <= 8.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-104388
PowerPress Podcasting plugin by Blubrry <= 11.17.9 - Unauthenticated Information Exposure
Medium
CVE-2026-104408
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.8.3 - Authenticated (Custom Role+) SQL Injection
Medium
CVE-2026-103335
Video Conferencing with Zoom <= 4.6.10 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-105068
Events Manager – Calendar, Bookings, Tickets, Appointments and more! <= 7.4.5 - Unauthenticated Information Exposure
Medium
CVE-2026-103378
Geliver Akıllı Kargo Pazaryeri 3.0.0 - 3.1.0 - Unauthenticated Information Exposure
Medium
CVE-2026-104953
MPG <= 4.2.2 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-96530
Optimole 4.0.0 - 4.2.14 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-42415
Porto Theme - Functionality <= 3.9.3 - Unauthenticated SQL Injection
Medium
CVE-2026-97331
User Private Files <= 2.1.8 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-104667
Animated Number Counters <= 3.0 - Authenticated (Editor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.