High
CVE-2026-39544
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-25385
URL Shortify <= 1.12.3 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2026-32390
Nanosoft < 1.3.2 - Missing Authorization
Medium
CVE-2026-39676
Download Manager <= 3.3.52 - Missing Authorization
Medium
CVE-2026-32387
Checkout for PayPal <= 1.0.46 - Missing Authorization
High
CVE-2026-32392
Greenly <= 8.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-25386
Ally <= 4.0.2 - Missing Authorization
Medium
CVE-2026-39674
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39675
Court Reservation <= 1.10.11 - Missing Authorization
High
CVE-2026-39677
Emphires <= 3.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-32388
GLB <= 1.2.2 - Missing Authorization
Medium
CVE-2026-25384
WP-Lister Lite for eBay <= 3.8.5 - Missing Authorization
Medium
CVE-2026-25378
Nelio AB Testing <= 8.2.4 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-1368
Video Conferencing with Zoom < 4.6.6 - Missing Authorization
Medium
CVE-2026-39670
Visual Link Preview <= 2.3.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-39672
ShipTime: Discounted Shipping Rates <= 1.1.4 - Missing Authorization
Medium
CVE-2026-39673
iZooto <= 3.7.20 - Missing Authorization
Medium
CVE-2026-32391
SmartFix < 1.2.4 - Missing Authorization
Medium
CVE-2026-2718
Dealia <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes
Medium
CVE-2026-2716
Client Testimonial Slider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting
Medium
CVE-2026-2714
Institute Management <= 5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Enquiry Form Title' Setting
Critical
CVE-2026-1994
s2Member <= 260127 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2025-4521
IDonate 2.1.5 - 2.1.9 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via idonate_donor_profile Function
Medium
CVE-2026-0556
XO Event Calendar <= 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xo_event_field' shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.