Medium
CVE-2026-65563
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
Medium
CVE-2025-15673
Import and export users and customers < 2.4.3 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2026-16539
SM Page Duplicator <= 1.0.0 - Authenticated (Editor+) SQL Injection
High
CVE-2026-59556
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-15231
TaxoPress <= 3.50.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Private Post Disclosure
Medium
CVE-2026-16297
Clearfy <= 2.4.2 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2026-16623
Create Block <= 2.9.0 - Code Injection to Authenticated (Admin+) PHP Code Injection
Medium
CVE-2026-16564
Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Arbitrary Order Status Modification
Medium
CVE-2026-16563
Academy LMS <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Lesson Content Disclosure
Critical
CVE-2026-16618
ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-65562
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-17032
Multiple Supsystic Pro Plugins <= 1.6.0 - Backdoored Software via Compromised Vendor Software
Medium
CVE-2026-65561
miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65557
Abandoned Cart Lite for WooCommerce <= 6.8.0 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2026-16565
Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Product Attribute Modification
Medium
CVE-2026-65568
Visual Composer Website Builder <= 45.15.0 - Missing Authorization
Critical
CVE-2026-14557
SoftMarket <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2026-65567
Event Tickets and Registration <= 5.29.0.1 - Missing Authorization
Critical
CVE-2026-16250
Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-59557
Events Made Easy <= 3.1.3 - Missing Authorization
High
CVE-2026-65558
AffiliateX – Amazon Affiliate Plugin, Product Boxes, Comparison Tables & Affiliate Link Tracking <= 2.3.5 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-15383
Blog Floating Button <= 1.4.20 - Unauthenticated Stored Cross-Site Scripting
Unrated
882
Phoca Maps pre version - other
High
CVE-2026-10033
EventON Action User <= 2.5.14 - Missing Authorization to Unauthenticated Privilege Escalation via evoau_save_capability AJAX Action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.