Medium
cac1c1fa-7d6c-43c3-885e-9be320cb8f83
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
c3f9898b-0aa0-4dd1-9298-96c853dbef5c
WordPress Core <= 7.0.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds
Medium
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Critical
CVE-2026-14526
AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route
Medium
CVE-2026-66459
SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) <= 2.4.2 - Missing Authorization
Medium
CVE-2026-18988
Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'accordionTitleTag' Block Attribute
Medium
CVE-2026-66460
AfterShip Tracking <= 1.18.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-66450
Geo Mashup <= 1.13.18 - Unauthenticated Local File Inclusion
Medium
CVE-2026-66441
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.10 - Missing Authorization
Medium
CVE-2026-11907
Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API
Critical
CVE-2026-14364
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
Critical
CVE-2026-14365
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
Medium
CVE-2026-0673
Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
High
CVE-2026-65571
69 Clothing | Brand Store & Fashion Boutique WordPress Theme <= 1.2.11.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-65582
AI Hub - Startup & Technology WordPress Theme <= 1.3.10 - Authenticated (Subscriber+) Arbitrary File Dowload
Medium
CVE-2026-15241
AI ChatBot for WooCommerce – WoowBot < 4.8.4 - Missing Authorization to Unauthenticated AI API Key Abuse
High
CVE-2026-65575
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor <= 1.5.3 - Unauthenticated PHP Object Injection
Medium
CVE-2026-65569
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.6 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2026-12586
Lenxel WP <= 1.0.31 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2026-65579
Agricola - Agriculture & Organic Farm Theme <= 1.21.0 - Unauthenticated PHP Object Injection
High
CVE-2026-61965
Geeky Bot – AI Sales Assistant for WooCommerce <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-65573
Abelle <= 1.22 - Unauthenticated PHP Object Injection
High
CVE-2026-65577
Advice - Psychology, Therapy & Counseling Theme <= 1.18.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-61981
Simple Link Directory Pro - AI Powered <= 15.0.8 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.