High
CVE-2026-28115
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-32419
List category posts <= 0.93.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-28110
LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Reflected Cross-Site Scripting
High
CVE-2026-39695
Podigee <= 1.4.0 - Unauthenticated Sever-Side Request Forgery
High
CVE-2026-28117
smart SEO <= 2.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32421
Post Timeline <= 2.4.1 - Missing Authorization
Medium
CVE-2026-40728
Magazine Blocks <= 1.8.3 - Missing Authorization
High
CVE-2026-28105
Good Energy <= 1.7.7 - Unauthenticated PHP Object Injection
High
CVE-2026-28133
Filr – Secure document library <= 1.2.13 - Authenticated (Contributor+) Arbitrary File Uploads
Medium
CVE-2026-28109
LambertGroup - AllInOne - Content Slider <= 3.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-28130
uDesign - Responsive WordPress Theme <= 4.14.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-32420
GamiPress <= 7.6.6 - Cross-Site Request Forgery
Medium
CVE-2024-10938
OVRI Payment 1.7.0 - Malicious .htaccess directive
Medium
CVE-2026-28137
MediCenter - Health Medical Clinic WordPress Theme <= 14.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-28112
AllInOne - Banner Rotator <= 3.8 - Reflected Cross-Site Scripting
High
CVE-2026-28129
Little Birdies | Multipurpose Children PSD Template <= 1.3.16 - Unauthenticated Local File Inclusion
Medium
CVE-2026-28108
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-39696
Elfsight WhatsApp Chat CC <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-28122
ListingPro Plugin <= 2.9.8 - Reflected Cross-Site Scripting
High
CVE-2026-1311
Worry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload
Medium
CVE-2026-2356
User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
High
CVE-2026-1779
User Registration & Membership <= 5.1.2 - Authentication Bypass
Medium
CVE-2026-2489
TP2WP Importer <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Watched domains' Textarea
Medium
CVE-2026-2029
Livemesh Addons for Beaver Builder <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' and 'value' Shortcode Attributes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.