High
CVE-2026-66627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Medium
CVE-2026-73404
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.41 - Missing Authorization
Medium
CVE-2026-27365
Issues and Series for Newspapers, Magazines, Publishers, Writers <= 2.17.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2026-73397
Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress <= 1.3.7 - Unauthenticated PHP Object Injection
High
CVE-2026-73358
Affiliates Manager <= 2.9.53 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-73381
Smart Popup by Supsystic <= 1.13.0 - Missing Authorization
High
CVE-2026-73355
Affiliates Manager <= 2.9.53 - Unauthenticated SQL Injection
Medium
CVE-2026-68568
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.41 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-32473
PDF Smart Viewer for Elementor <= 1.0.4 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-73190
Premium Packages – Sell Digital Products Securely <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66634
Modal Survey - WordPress Poll, Survey & Quiz Plugin <= 2.0.2.2.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2026-73341
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.7 - Unauthenticated PHP Object Injection
Medium
CVE-2026-66644
Typing Effect <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66640
Login With Ajax – Fast Logins, 2FA, Redirects <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-73395
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Insecure Direct Object Reference
Critical
CVE-2026-73343
WP Compress – Instant Performance & Speed Optimization < 7.20.01 - Unauthenticated Remote Code Execution
High
CVE-2026-73378
Contact Form by Supsystic < 1.10.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66603
Draft List <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32468
Duitku Payment Gateway <= 2.11.14 - Unauthenticated Information Exposure
High
CVE-2026-73376
Ultimate Maps by Supsystic < 1.5.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-73396
MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.6.7 - Missing Authorization
Medium
CVE-2026-66645
Table Of Contents Block <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66651
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.17 - Missing Authorization
Medium
CVE-2026-73398
Piraeus Bank WooCommerce Payment Gateway 3.2.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.