High
CVE-2026-65448
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-10526
EmbedPress <= 4.6.0 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2026-14816
The GDPR Framework <= 2.3.0 - Missing Authorization
Medium
CVE-2026-66448
Gallery PhotoBlocks <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66476
Easy Digital Downloads <= 3.6.9 - Authenticated (Admin) Arbitrary File Deletion
Medium
CVE-2026-15233
Nested Pages <= 3.2.14 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2026-16547
REST API Log <= 1.7.0 - Missing Authorization to Unauthenticated Sensitive Log Data Disclosure
Medium
CVE-2026-65433
RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 - Missing Authorization
High
CVE-2026-65439
Ultimate Addons for Contact Form 7 <= 3.5.45 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14872
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.4 - Authenticated (Authenticated+) SQL Injection
Medium
CVE-2026-66428
Google Review Slider <= 18.4 - Cross-Site Request Forgery
High
CVE-2026-65441
GiveWP <= 4.16.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-65442
FormCraft <= 3.9.15 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-16746
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure
Medium
CVE-2026-14939
Visualizer: Tables and Charts Manager <= 4.0.5 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-59558
Booking Calendar <= 11.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16070
Brizy - Page Builder <= 2.8.18 - Insecure Direct Object Reference to Authenticated (Contributor+) Template Type Update
Medium
CVE-2026-66475
Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2026-16736
User Registration & Membership <= 5.2.5 - Missing Authorization to Unauthenticated Account Creation While Registration Disabled
Medium
CVE-2026-16602
Content Protector (Passster) <= 4.3.5 - Unauthenticated Non-Public Post Content Disclosure
Medium
CVE-2026-15958
Easy Dropbox Integration <= 2.1.0 - Missing Authorization
Medium
CVE-2026-65434
ЮKassa для WooCommerce <= 2.16.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16583
Orbit Fox by ThemeIsle <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-16035
miniOrange 2FA <= 6.2.6 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.