Medium
CVE-2026-81429
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-76550
Import Export Lite <= 3.9.33 - Authenticated (Admin+) Remote Code Execution
High
CVE-2026-85530
GiveWP <= 4.16.8.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-86444
LearnPress <= 4.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2026-84906
Eventin <= 4.1.23 - Unauthenticated Payment Bypass
High
CVE-2026-88793
YouTube Embed – YouTube Gallery, Vimeo Gallery – WordPress Plugin 10.0 - 10.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-86784
Visualizer <= 4.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-19857
Formidable Forms <= 6.34 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-86823
Newsletter <= 9.3.6 - Unauthenticated Open Redirect
High
CVE-2026-76552
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-85349
FluentBoards <= 2.0.14 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-74933
GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-77702
Eventin <= 4.1.23 - Missing Authorization
Medium
CVE-2026-84905
Eventin <= 4.1.23 - Missing Authorization
High
CVE-2026-14805
Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX
Critical
b8a7a925-2b9e-43bc-b649-c7ec518e063c
Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type
Medium
CVE-2026-86475
Appointment Hour Booking <= 1.5.94 - Unauthenticated Appointment Slot Capacity Bypass
Medium
CVE-2026-74926
MultiVendorX <= 5.0.15 - Missing Authorization
Medium
CVE-2026-76557
Import Export Lite <= 3.9.32 - Authenticated (Admin+) SQL Injection
High
CVE-2026-85129
Hoo Companion 1.0.2 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-84171
WP images upload on piclect <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-86406
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 4.4.6 - 5.2.7 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-80491
SAMO Forms <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2026-86449
LearnPress <= 4.4.6 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.