Medium
CVE-2026-0673
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-65571
69 Clothing | Brand Store & Fashion Boutique WordPress Theme <= 1.2.11.1 - Unauthenticated PHP Object Injection
Critical
CVE-2026-12872
Webinfos <= 1.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-17020
Salon Booking System – Free Version < 10.31.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Booking PII Disclosure
Medium
CVE-2026-65582
AI Hub - Startup & Technology WordPress Theme <= 1.3.10 - Authenticated (Subscriber+) Arbitrary File Dowload
Medium
CVE-2026-15241
AI ChatBot for WooCommerce – WoowBot < 4.8.4 - Missing Authorization to Unauthenticated AI API Key Abuse
High
CVE-2026-65575
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor <= 1.5.3 - Unauthenticated PHP Object Injection
Medium
CVE-2026-65569
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website <= 2.5.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-18960
Block User Account <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Account Block Bypass
Medium
CVE-2026-15237
Hotel Booking Lite <= 6.2.2 - Missing Authorization
High
CVE-2026-14860
Podcast Player <= 8.3.0 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2026-12586
Lenxel WP <= 1.0.31 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2026-66684
Export Import Menus <= 1.9.2 - Unauthenticated Information Exposure
High
CVE-2026-14836
Login & Register Forms – Popup, Slider, Profile & WooCommerce < 3.2.5 - Authentication Bypass via Brute Force
High
CVE-2026-65579
Agricola - Agriculture & Organic Farm Theme <= 1.21.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-66706
Subscribe to Comments <= 2.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-17021
Salon Booking System – Free Version <= 10.30.33 - Missing Authorization
Medium
CVE-2026-66686
Plugins Garbage Collector (Database Cleanup) <= 0.14 - Cross-Site Request Forgery
High
CVE-2026-61965
Geeky Bot – AI Sales Assistant for WooCommerce <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-16256
POUCO Import Users <= 1.0.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-32469
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress <= 7.6.0 - CAPTCHA Bypass
Medium
CVE-2026-66683
Custom CSS and JavaScript <= 2.0.16 - Unauthenticated Information Exposure
High
CVE-2026-65573
Abelle <= 1.22 - Unauthenticated PHP Object Injection
Medium
CVE-2026-65580
Agrion <= 1.0.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.