Critical
CVE-2026-1555
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2025-15470
Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion
High
CVE-2026-6227
BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter
High
CVE-2026-39468
Meta Box <= 5.11.1 - Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2026-5809
wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter
Medium
CVE-2026-4979
UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter
High
CVE-2026-4351
Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter
Critical
CVE-2026-1830
Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload
High
CVE-2026-5436
MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys
Critical
CVE-2026-2942
ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
Medium
CVE-2026-2519
Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'
High
CVE-2026-39522
Solene <= 3.4 - Unauthenticated Local File Inclusion
High
CVE-2026-39523
Solene Core <= 2.3.2 - Unauthenticated Local File Inclusion
High
CVE-2026-39559
Uppercase < 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2026-39549
Aperitif <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-39568
Mr. SEO <= 2.0 - Unauthenticated Local File Inclusion
High
CVE-2026-39552
Blueprint < 1.1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-39553
WaveRide <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-39537
Mikado Core <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-39582
Hitek < 1.8.3 - Unauthenticated Local File Inclusion
High
CVE-2026-39558
Malmö <= 2.2 - Unauthenticated Local File Inclusion
High
CVE-2026-39591
WP-BusinessDirectory – Business directory plugin for WordPress <= 4.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-39547
Getaway < 1.8 - Unauthenticated Local File Inclusion
High
CVE-2026-4808
Gerador de Certificados – DevApps <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.