High
CVE-2026-5478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-6248
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
High
CVE-2026-40747
Ecommerce Zone <= 0.9.7 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-39590
Atomlab <= 2.4.5 - Unauthenticated Local File Inclusion
High
CVE-2026-40748
Kids Gift Shop <= 0.5.4 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2026-40746
Restaurant Zone <= 0.7.8 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-39489
Download Monitor <= 5.1.9 - Authenticated (Author+) Arbitrary File Download
High
CVE-2026-40750
Kids Online Store <= 0.8.9 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2026-40749
Charity Zone <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-39465
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.106.0 - Authenticated (Editor+) Remote Code Execution
High
CVE-2026-39589
Webenvo <= 0.0.6 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-6518
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
High
CVE-2026-5718
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
High
CVE-2026-5710
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field
High
CVE-2026-3464
WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file
High
CVE-2026-39527
WpStream – Live Streaming, Video on Demand, Pay Per View < 4.11.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-40724
Client Portal (Pro) <= 5.6.2 - Authenticated (CP Client+) Arbitrary File Download
High
CVE-2026-40731
ChapterOne <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2026-40727
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.4 - Authenticated (Sales Representative+) Arbitrary File Deletion
High
CVE-2026-39598
Academy LMS Pro < 3.5.2 - Authenticated (Custom+) Arbitrary File Upload
High
CVE-2025-14868
Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2026-3875
BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
High
CVE-2026-1620
Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
High
CVE-2026-5617
Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.