Medium
CVE-2026-65474
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2026-27418
WP Fast Total Search – The Power of Indexed Search <= 1.81.282 - Missing Authorization
Medium
CVE-2026-65464
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.3 - Cross-Site Request Forgery
Medium
CVE-2026-65452
Ebook Store <= 6.19 - Missing Authorization
Medium
CVE-2026-65467
JetEngine <= 3.8.11 - Authenticated (Contributor+) Sever-Side Request Forgery
Medium
CVE-2026-27377
QuickCal <= 1.0.16 - Missing Authorization
Medium
CVE-2026-65490
Create <= 2.6.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-65451
MapSVG <= 8.14.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-65503
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65480
TheGem <= 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65449
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-59542
Kali Forms — Contact Form & Drag-and-Drop Builder <= 2.4.18 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-65455
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-65463
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.3.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-25427
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization
Medium
CVE-2026-65458
Polylang <= 3.8.5 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-65465
JetElements <= 2.9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-59545
miniOrange Discord Integration <= 2.2.4 - Missing Authorization
Medium
CVE-2026-65450
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68081
WP-Polls <= 2.77.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2026-27403
Hubbub Lite <= 1.36.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65486
Event Post <= 6.1.0 - Missing Authorization
Medium
CVE-2026-65472
Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages <= 3.3.5 - Missing Authorization
Medium
CVE-2026-16063
Event Booking Manager for WooCommerce <= 5.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.