High
CVE-2026-97237
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-89411
Paymattic <= 4.6.25 - Unauthenticated Payment Bypass
High
CVE-2026-84069
WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated Local File Inclusion
Medium
CVE-2026-84097
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-16591
Directory Kit <= 1.5.7 - Authenticated (Listing Admin+) Stored Cross-Site Scripting
High
CVE-2026-94121
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-96814
Product Table & List Builder for WooCommerce <= 5.6.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-97245
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.7.2 - Authenticated (Shop Worker+) Privilege Escalation
High
CVE-2026-94076
GEO Plugin by Squirrly SEO <= 14.2.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-84095
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-96338
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97079
Appointment Booking Plugin & Scheduling System – Webba Booking Calendar <= 6.5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-94074
Simply Schedule Appointments <= 1.6.12.29 - Missing Authorization
Medium
CVE-2026-94674
Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing <= 1.69.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97236
ThemeREX Addons < 2.45.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-96835
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.85 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97238
JetEngine <= 3.8.14.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-96829
The Plus Addons for Elementor – Mega Menu, Header Footer, Post Grid, AI Widgets & Templates <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-96347
Online Scheduling and Appointment Booking System – Bookly <= 28.2 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-96532
Testimonials Widget <= 4.0.4 - Missing Authorization
High
CVE-2026-94078
Site Reviews <= 8.3.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-84279
Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job
Medium
CVE-2026-84096
Review Slider Pro <= 12.7.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-92411
Delicious <= 1.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.