Medium
CVE-2026-82185
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-78362
SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation
Medium
CVE-2026-19858
JetFormBuilder — Dynamic Blocks Form Builder < 3.6.5.2 - Unauthenticated Information Exposure
Medium
CVE-2026-85132
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode 4.0.2 - 4.4.1 - Missing Authorization to Information Exposure
High
CVE-2026-18480
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments < 4.6.3 - Authenticated (Subscriber+) Arbitrary Account Email Takeover
Medium
CVE-2026-83537
Express Checkout <= 2.4.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-13144
Travel <= 12.0.1 - Missing Authorization
Medium
CVE-2026-80339
Payment Plugins for Stripe WooCommerce <= 4.0.11 - Unauthenticated Information Exposure
Medium
CVE-2026-85133
WPLP Cookie Consent <= 4.4.1 - Missing Authorization
Medium
CVE-2026-84935
HT Menu – WordPress Mega Menu Builder for Elementor < 1.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-84934
JCH Optimize < 6.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-85117
LukasApps CAPTCHA tools for Contact Form 7 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2026-16502
Live Composer <= 2.1.18 - Authenticated (Contributor+) PHP Object Injection via Shortcode
High
CVE-2026-9331
EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter
Medium
CVE-2026-80341
Payment Plugins for PayPal WooCommerce <= 2.0.25 - Missing Authorization
Medium
CVE-2026-81741
Groundhogg — CRM, Newsletters, and Marketing Automation < 4.7.2 - Unauthenticated Open Redirect
Medium
CVE-2026-18042
Travel <= 12.0.1 - Missing Authorization
High
CVE-2026-82304
Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQL Injection
Medium
CVE-2026-8279
Masteriyo LMS <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion
High
CVE-2026-6431
User Profile Builder <= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field
Medium
CVE-2026-4945
Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass
Medium
CVE-2026-84028
Bold Page Builder < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-2390
Powerkit <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing
Medium
CVE-2026-12853
Flamingo <= 2.6.2 - Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.