Medium
CVE-2026-88944
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Medium
CVE-2026-92554
ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name
Medium
CVE-2026-16777
Store Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter
High
CVE-2026-18442
WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter
High
CVE-2026-14323
Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters
Medium
CVE-2026-66575
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.81 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-66580
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels <= 7.12.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-66625
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.7.2.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-66631
MoreConvert Wishlist for WooCommerce <= 1.9.21 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-92430
Rede Itaú for WooCommerce <= 5.4.6 - Missing Authorization
Medium
CVE-2026-87829
Checkout Field Manager <= 7.9.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce <= 9.2.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-92435
Mailchimp for WooCommerce <= 6.1.0 - Missing Authorization
Medium
CVE-2026-87831
Checkout Field Manager <= 7.9.6 - Missing Authorization
Medium
CVE-2026-84091
SUMIT Payment Gateway for WooCommerce <= 3.0.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-84902
King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-85350
UpsellWP <= 2.2.9 - Unauthenticated Payment Bypass
High
CVE-2026-87770
Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-84903
King Addons for Elementor <= 51.1.80 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-84904
King Addons for Elementor 51.1.56 - 51.1.80 - Missing Authorization
Medium
CVE-2026-87836
Comments Import & Export 2.1.11 - 2.5.3 - Authenticated (Author+) Information Exposure
Critical
CVE-2026-85128
Choose User Role at Registration for WooCommerce <= 1.3.2 - Unauthenticated Privilege Escalation
High
CVE-2026-87786
Dewa Kirim <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-91019
Event Booking Manager for WooCommerce <= 5.5.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.