High
CVE-2026-27041
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2026-1870
Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosure
High
CVE-2026-24969
Instant VA <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-2917
Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Duplication via 'post_id' Parameter
Medium
CVE-2026-2918
Happy Addons for Elementor <= 3.21.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Stored Cross-Site Scripting via Template Conditions
High
CVE-2026-2413
Ally – Web Accessibility & Usability <= 4.0.3 - Unauthenticated SQL Injection via URL Path
High
CVE-2025-13067
Royal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload Bypass
Medium
CVE-2025-12473
RTMKit <= 1.6.8 - Reflected Cross-Site Scripting via 'themebuilder' Parameter
High
CVE-2026-2724
Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields
Medium
CVE-2026-32445
Elementor Website Builder <= 3.35.5 - Missing Authorization
Medium
CVE-2026-3034
OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls
Critical
CVE-2026-2599
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
Medium
CVE-2026-27332
Agrofood < 1.4.0 - Reflected Cross-Site Scripting
High
CVE-2026-22452
Hoverex | Cryptocurrency & ICO Elementor Template Kit <= 1.5.10 - Unauthenticated Local File Inclusion
High
CVE-2025-69090
Remons <= 1.3.4 - Unauthenticated Local File Inclusion
High
CVE-2026-2568
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-3132
Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_preview
High
CVE-2026-27998
Vixus - Business Startup Elementor Template Kit <= 1.0.16 - Unauthenticated Local File Inclusion
High
CVE-2026-28021
Craftis - Handcraft & Artisan Elementor Template Kit <= 1.2.8 - Unauthenticated Local File Inclusion
Critical
CVE-2026-27983
LMS Elementor Pro <= 1.0.4 - Unauthenticated Privilege Escalation
Medium
CVE-2026-39708
UiCore Elements <= 1.3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32429
Magical Addons For Elementor <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32430
PowerPack Addons for Elementor <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39703
WPBITS Addons For Elementor Page Builder <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.