Medium
CVE-2026-81571
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-76585
Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-76548
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Missing Authorization
Medium
CVE-2026-77010
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Information Exposure
High
CVE-2026-16947
Total processing card payments for WooCommerce <= 7.3 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-83492
Kubio AI Website Builder < 2.9.1 - Authenticated (Admin+) Denial of Service
Critical
CVE-2026-12526
Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Privilege Escalation via Administrator Account Takeover
High
CVE-2026-82183
OAuth Single Sign On <= 7.0.0 - Unauthenticated Arbitrary User Account Takeover
Medium
60f5f64a-5347-47f5-afff-b103a8ebd750
Breakdance <= 2.8.1 - Missing Authorization
Medium
CVE-2026-74927
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.13 - 5.0.14 - Unauthenticated Information Exposure
Medium
CVE-2026-7877
WP Recipe Maker Premium <= 10.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wprm-call-to-action' Shortcode
Critical
CVE-2026-82970
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2026-66047
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force
High
CVE-2026-16061
Rest Routes – Custom Endpoints for WordPress REST API <= 5.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-77782
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure
High
CVE-2026-10195
FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting
Medium
CVE-2026-74010
bbPress <= 2.6.14 - Missing Authorization
Medium
CVE-2026-77793
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
Medium
CVE-2026-83562
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-10522
MemberHero – Simple User Registration & Login <= 6.9 - Unauthenticated Privilege Escalation
Medium
CVE-2026-77788
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization to Authenticated (Author+) Arbitrary Post/User Meta Overwrite
Medium
CVE-2026-81432
JetStyleManager for Gutenberg < 1.3.9 - Cross-Site Request Forgery
High
CVE-2026-16259
Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
High
CVE-2026-19116
User Frontend <= 4.3.10 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.