Medium
CVE-2026-11996
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-11984
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter
Medium
CVE-2026-16588
WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameter
Medium
CVE-2026-5924
Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
High
CVE-2026-78088
Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameter
Critical
CVE-2026-14349
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary User Email Modification via 'admin_addcustomer' AJAX Action
Critical
CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
Critical
CVE-2026-62104
Migratico Lite <= 2.6.8 - Unauthenticated Remote Code Execution
High
CVE-2026-90650
MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'
Medium
CVE-2026-90923
Autopay <= 5.0.0 - Missing Authorization
Critical
CVE-2026-88795
wpShopGermany IT-RECHT KANZLEI <= 2.3 - Unauthenticated Remote Code Execution
Critical
CVE-2026-86710
Login with QR <= 1.0.0 - Authentication Bypass
Medium
CVE-2026-87836
Comments Import & Export 2.1.11 - 2.5.3 - Authenticated (Author+) Information Exposure
Medium
CVE-2026-91010
Invisible Anti-Spam & CAPTCHA <= 5.1.0 - Missing Authorization
Medium
CVE-2026-88904
PuppyFW <= 0.4.4 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-86801
To Do List Member 1.4 - 1.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-85128
Choose User Role at Registration for WooCommerce <= 1.3.2 - Unauthenticated Privilege Escalation
Medium
CVE-2025-15697
Dictionary <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-91015
Master Addons for Elementor <= 3.1.8 - Missing Authorization
High
CVE-2026-88792
Dictionary <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-87792
Design Scuole Italia <= 2.17.3 - Missing Authorization
High
CVE-2026-87791
Design Scuole Italia <= 2.18.1 - Unauthenticated Arbitrary File Donwload
Medium
CVE-2026-86446
LearnPress 4.4.3 - 4.4.6 - Unauthenticated Information Exposure
Critical
CVE-2026-86709
The Pressengine <= 1.0 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.