High
CVE-2026-1400
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-14610
TableMaster for Elementor <= 1.3.6 - Authenticated (Author+) Server-Side Request Forgery via 'csv_url' Parameter
Medium
CVE-2026-0746
AI Engine <= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-69299
Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-25428
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.5.5 - Authenticated (Editor+) Server-Side Request Forgery
Critical
CVE-2026-1056
Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal
High
CVE-2026-24531
Prowess <= 2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-24538
Omnipress <= 1.6.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-24390
Kentha Elementor Widgets < 3.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-0911
Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import
Low
CVE-2026-0633
MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value
Medium
CVE-2025-13676
JustClick registration plugin <= 0.1 - Reflected Cross-Site Scripting via PHP_SELF
High
CVE-2026-1257
Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute
High
CVE-2026-0807
Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Critical
CVE-2025-13374
Kalrav AI Agent <= 2.3.8 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
High
CVE-2026-24548
Radio Player <= 2.0.91 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-69322
PeakShops < 1.5.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-0927
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload
High
CVE-2025-67957
Listivo Core <= 2.3.77 - Unauthenticated Local File Inclusion
High
CVE-2026-22338
EcoBlue <= 1.15 - Unauthenticated Local File Inclusion
High
CVE-2025-67968
Real Homes CRM <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-67961
WPO365 <= 40.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Critical
CVE-2025-67963
Movie Booking <= 1.1.5 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-69319
Beaver Builder <= 2.9.4.1 - Authenticated (Contributor+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.