Medium
CVE-2026-102386
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-102396
Ultimate Maps by Supsystic <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-102398
Smart Popup by Supsystic <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-102395
Easy Google Maps <= 1.14.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97289
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97272
Premmerce Permalink Manager for WooCommerce <= 2.3.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-97270
CMB2 <= 2.13.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97318
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Open Redirect
Medium
CVE-2026-97285
The Events Calendar <= 6.17.5 - Missing Authorization
Medium
CVE-2026-62080
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates <= 3.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-85016
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97266
Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97282
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.0 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-94115
Pricing Table WordPress Plugin – Easy Pricing Tables <= 4.1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-97274
OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 - Unauthenticated Authentication Bypass
Medium
CVE-2026-62085
WP Activity Log <= 5.6.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-97317
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure
Medium
CVE-2026-97286
Strong Testimonials <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97067
EWWW Image Optimizer <= 8.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-102399
Photo Gallery – Responsive Image Galleries by Supsystic <= 1.21.0 - Cross-Site Request Forgery
Medium
CVE-2026-97302
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO <= 4.2.3 - Unauthenticated Information Exposure
Medium
CVE-2026-62081
Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce <= 1.14.11 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
b3a4ff32-52a8-4bb0-8bf6-536a89d338e9
WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field
Medium
CVE-2026-97293
Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.