Critical
CVE-2026-12497
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2026-12981
CAFEHAUS API <= 1.0.0 - Unauthenticated Privilege Escalation via Password Reset
Medium
CVE-2026-11398
LatePoint <= 5.6.1 - Missing Authorization to Unauthenticated Arbitrary Customer Data Modification via process_step_customer() Booking Form Customer Step
Medium
CVE-2026-11900
Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute
Medium
CVE-2026-9230
Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure
Critical
CVE-2026-9725
Printcart Web to Print Product Designer for WooCommerce <= 2.5.2 - Unauthenticated Arbitrary File Deletion
High
CVE-2026-14352
AR for WooCommerce <= 8.40 - Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter
High
CVE-2026-14327
AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter
Medium
CVE-2026-12734
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block Attribute
Medium
CVE-2026-12729
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
Medium
CVE-2026-12731
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
High
CVE-2026-57800
Overworld - eSports and Gaming WordPress Theme <= 1.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57798
NewsPlus Shortcodes <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-9180
MotoPress Appointment Booking <= 2.4.4 - Unauthenticated Insecure Direct Object Reference to 'payment_details.booking_id' Parameter
High
CVE-2026-57789
Aqua <= 5.1.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57799
Nuss - Hotel Booking WordPress <= 1.3.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57803
Struktur Core <= 2.5.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57795
Kitchor <= 1.4.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57792
Dør - Modern Architecture and Interior Design Theme <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57801
SetSail - Travel Agency WordPress Theme <= 2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57805
Tonda <= 2.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57788
Aalto <= 1.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57802
Struktur - Creative Agency WordPress Theme <= 2.5.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-12082
Praison AI SEO <= 5.0.6 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.