Critical
CVE-2026-77826
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-82023
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.5 - Missing Authorization
Medium
b0fe7d29-118f-42fb-9e48-6217faaa689b
JetFormBuilder <= 3.6.2 - Missing Authorization to Unauthenticated JetEngine Options Page Modification
Medium
CVE-2026-84927
EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents 4.6.0 - 4.6.3 - Missing Authorization to Authenticated (Contributor+) Site-Wide Places Library Modification
High
CVE-2026-19861
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-12483
LearnDash LMS <= 5.1.5 - Authenticated (Subscriber+) Arbitrary File Upload via Assignment Upload Handler
Medium
CVE-2026-85307
KP Agent Ready <= 1.1.99 - Unauthenticated Information Exposure
Medium
CVE-2026-85304
Unlimited Elements For Elementor <= 2.0.17 - Missing Authorization
Medium
CVE-2026-77784
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization to Authenticated (Author+) SEO Object Updates
Medium
CVE-2026-84769
Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.26 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-84766
Fluent Booking Pro <= 2.2.1 - Missing Authorization
Medium
CVE-2026-19453
JetBackup – Backup, Restore & Migrate 3.1.7.9 - 3.1.23.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-85306
MountDev AI MCP Connector for WordPress <= 1.6.5 - Missing Authorization
High
72f4776f-5450-4022-92dd-47ddaa91a5cd
Jetpack 12.0 - 16.1.2 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2026-84836
SmartyParcel – Multi-Carrier Shipping, Order Tracking & Live Rates for WooCommerce <= 1.22.5 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-81583
Theme My Login 7.0 - 7.1.15 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-84758
Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.26 - Missing Authorization
Medium
CVE-2026-19723
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-80439
Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2026-84848
Quick Event Manager <= 9.17 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-85308
SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.5 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-84754
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.12.13 - Missing Authorization
Medium
CVE-2025-15694
Joli Table Of Contents 2.0.0 - 2.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2026-84215
Timetics – Appointment Booking Calendar & Scheduling <= 1.0.61 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.