Medium
CVE-2026-101160
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-80517
Ultimate CSV Importer 7.17 - 9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2026-17005
Horizontal Scrolling Announcements <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-88783
Kubio AI Page Builder <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-101888
Prime Mover – Backup and Migration <= 2.2.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-101162
Ultimate Review <= 2.4.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-103293
MPG <= 4.2.2 - Authenticated (Editor+) Arbitrary File Read
Medium
CVE-2026-92923
Unlimited Elements For Elementor 1.5.142 - 2.0.20 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-103514
2FA <= 4.0.0 - Unauthenticated Two-Factor Authentication Bypass
High
CVE-2026-85015
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Admin+) Arbitrary File Write
Medium
CVE-2026-86832
MetForm <= 4.3.0 - Unauthenticated Information Exposure
Medium
CVE-2026-94238
Loco Translate <= 2.8.8 - Authenticated (Translator+) Limited File Read
High
CVE-2026-89236
SaveTo Wishlist Lite <= 1.1.4 - Unauthenticated SQL Injection
High
CVE-2026-85568
Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQL Injection
Medium
CVE-2026-96962
Pie Register <= 3.8.4.13 - Unauthenticated Information Exposure
Medium
CVE-2026-86833
MetForm <= 4.3.0 - Unauthenticated Arbitrary HTML Injection in Notification Emails
Medium
CVE-2026-86834
MetForm 2.2.1 - 4.3.0 - Unauthenticated Information Exposure
Medium
CVE-2026-94239
Loco Translate <= 2.8.8 - Authenticated (Translator+) Stored Cross-Site Scripting
High
CVE-2026-101889
Prime Mover – Backup and Migration <= 2.2.0 - Authenticated (Admin+) Arbitrary Directory Deletion
Medium
CVE-2026-80518
Ultimate CSV Importer <= 9.1 - Unauthenticated Information Exposure
Critical
CVE-2026-95588
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-101890
Prime Mover – Backup and Migration <= 2.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2026-92144
Forminator Forms <= 1.57.2 - Unauthenticated Stored Cross-Site Scripting via 'postdata-1[post-custom]' Parameter
Medium
CVE-2026-96256
Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.