Medium
CVE-2026-39765
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-39766
ARforms <= 7.1.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42634
Video Background Block – Add Stunning Video Backgrounds to Any Section <= 2.0.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42636
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-42638
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Missing Authorization
High
CVE-2026-42418
Social Rocket – Social Sharing Plugin <= 1.3.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42417
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 7.8 - Unauthenticated SQL Injection
Medium
CVE-2026-42416
uDesign | Multipurpose WordPress Theme <= 4.15.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-42414
ListingPro Plugin <= 2.9.12 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-40806
Blog, Posts and Category Filter for Elementor <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-40807
CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-41555
Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 - Unauthenticated SQL Injection
Medium
CVE-2026-41559
SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 - Unauthenticated Information Exposure
Medium
CVE-2026-41560
WXD Backup Lite <= 1.0.2 - Missing Authorization
Medium
CVE-2026-41561
Museder RestoreOne <= 2.7.276 - Unauthenticated Information Exposure
Medium
CVE-2026-41562
Norvis Backup <= 1.1.0 - Unauthenticated Information Exposure
Medium
CVE-2026-41563
Sitemovr <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2026-42413
Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 - Unauthenticated Information Exposure
Medium
CVE-2026-105072
Fluent Booking Pro < 2.5.0 - Missing Authorization
Medium
CVE-2026-25434
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden <= 3.5.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-25433
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden <= 3.5.7 - Missing Authorization
High
CVE-2026-39750
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39760
Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder <= 5.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39761
Meta Box AIO <= 3.7.1 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.