High
CVE-2026-73181
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
High
CVE-2026-75091
Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-12248
WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
Medium
CVE-2026-19073
Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Information Exposure
Medium
CVE-2026-14832
ShopSmart Loyalty for WooCommerce <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure
High
CVE-2026-73382
Site Reviews <= 8.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-73348
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
High
CVE-2026-13700
WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-18945
WP Helper Premium < 4.7.6 - Unauthenticated Information Exposure
Medium
CVE-2026-18046
Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager < 0.0.10 - Missing Authorization
Medium
CVE-2026-73995
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.6 - Missing Authorization
Medium
CVE-2026-13328
Food Menu – Restaurant Menu & Online Ordering for WooCommerce < 6.0.2 - Missing Authorization
Medium
CVE-2026-15213
Welcart e-Commerce < 2.11.33 - Unauthenticated Payment Bypass
Medium
CVE-2026-16094
Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter
Medium
CVE-2026-18049
WP Photo Album Plus < 9.2.07.002 - Missing Authorization
Medium
CVE-2026-16294
PowerPress Podcasting plugin by Blubrry < 11.17.1 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-16621
Payment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass
Medium
CVE-2026-28567
WP Sort Order <= 1.3.5 - Missing Authorization
Medium
CVE-2026-16650
Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) < 1.8.12 - Unauthenticated Donation Payment Bypass
Medium
CVE-2026-15993
Form Maker by 10Web <= 1.15.44 - Authenticated (Subscriber+) SQL Injection via '{username}' Placeholder in Dynamic-Choice Field WHERE Clause
Medium
CVE-2026-13712
Divi 5.0 - 5.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-66667
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-28570
Vavo Core <= 2.3.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-73189
WP Crowdfunding < 2.2.1 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.