Medium
CVE-2026-82212
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-82211
Nexi XPay Build 7.0.0 - 7.6.2 - Missing Authorization
Medium
CVE-2026-39772
Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms <= 5.2.8 - Missing Authorization
Medium
CVE-2026-103378
Geliver Akıllı Kargo Pazaryeri 3.0.0 - 3.1.0 - Unauthenticated Information Exposure
High
CVE-2026-39759
Workreap Core <= 3.4.5 - Authenticated (Employer / Sales Representative+) Arbitrary File Upload
Medium
CVE-2026-97071
CURCY – Multi Currency for WooCommerce <= 2.2.17 - Missing Authorization
Medium
CVE-2026-104953
MPG <= 4.2.2 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-105057
Zero Spam for WordPress <= 5.7.11 - Unauthenticated Spam Protection Bypass on Login
Medium
CVE-2026-97308
Login Lockdown & Protection <= 2.17 - Unauthenticated Login Lockout Protection Bypass
Medium
CVE-2026-39793
Simple JWT Login – Allows you to use JWT on REST endpoints. 4.0.0 - Missing Authorization
Medium
CVE-2026-94669
Fluent Forms Pro Add On Pack <= 6.2.13 - Missing Authorization
Medium
CVE-2026-42637
PayPlug for WooCommerce (Official) <= 3.1.0 - Missing Authorization to Unauthenticated Settings Change
High
CVE-2026-104677
Coder 4.0 - 4.5.1 - Authenticated (Editor+) Remote Code Execution
Medium
CVE-2026-105397
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9.1 - Authenticated (Instructor+) Stored Cross-Site Scripting
Medium
CVE-2026-87782
Koinonia Link 1.1.2 - 1.1.4 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2026-39792
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-97354
PowerPress 11.13.12 - 11.17.9 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-39748
EduMall - Professional LMS Education Center WordPress Theme <= 4.5.3 - Reflected Cross-Site Scripting
Critical
CVE-2026-39774
Tourfic Pro <= 1.17.3 - Unauthenticated Privilege Escalation
High
CVE-2026-42635
WooCommerce Simple Auctions <= 3.0.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-105316
Magee Shortcodes <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-105064
Unlimited Elements for Elementor <= 2.0.22 - Missing Authorization
Medium
CVE-2026-41558
WP Synchro – The Ultimate WordPress Migration Tool <= 1.16.1 - 2-Factor Authentication Bypass
Medium
CVE-2026-103681
Frontend Dashboard <= 2.0.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.