High
CVE-2026-73341
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,504
Medium
CVE-2026-66644
Typing Effect <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66640
Login With Ajax – Fast Logins, 2FA, Redirects <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-73395
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Insecure Direct Object Reference
Critical
CVE-2026-73343
WP Compress – Instant Performance & Speed Optimization < 7.20.01 - Unauthenticated Remote Code Execution
High
CVE-2026-73378
Contact Form by Supsystic < 1.10.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66603
Draft List <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32468
Duitku Payment Gateway <= 2.11.14 - Unauthenticated Information Exposure
High
CVE-2026-73376
Ultimate Maps by Supsystic < 1.5.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-73396
MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics <= 1.6.7 - Missing Authorization
Medium
CVE-2026-66645
Table Of Contents Block <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66651
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions <= 5.0.17 - Missing Authorization
Medium
CVE-2026-73398
Piraeus Bank WooCommerce Payment Gateway 3.2.0 - Missing Authorization
Medium
CVE-2026-66589
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More <= 5.2.30 - Missing Authorization
Medium
CVE-2026-73345
License Manager for WooCommerce <= 3.0.18 - Authenticated (Customer+) SQL Injection
Medium
CVE-2026-73994
Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.11.3 - Missing Authorization
Medium
CVE-2026-68565
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.177 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66646
WP Tab Widget <= 1.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-73350
SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent <= 3.5.1 - Missing Authorization
High
CVE-2026-73351
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66629
Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-68567
EasyTest – Simplify A/B Testing <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66636
Wise Chat <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32472
Online Contact Widget-多合一在线客服插件 <= 1.3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.