High
CVE-2026-57397
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2026-57407
PDF Generator for WordPress <= 1.6.2 - Authenticated (Subscriber+) Server-side Request Forgery
Medium
CVE-2026-11351
ShinyStat Analytics 1.0.12 - 1.0.17 - Unauthenticated Information Exposure
High
CVE-2026-57387
picu – Online Photo Proofing Gallery <= 3.5.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13690
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP < 1.2.67 - Two-Factor Authentication Bypass
High
CVE-2026-57713
Events Manager – Calendar, Bookings, Tickets, and more! <= 7.3.6 - Unauthenticated PHP Object Injection
High
CVE-2026-57409
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57693
Ad Inserter – Ad Manager & AdSense Ads <= 2.8.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-57714
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress <= 5.6.3 - Unauthenticated SQL Injection
Medium
CVE-2026-57412
Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.6.9 - Missing Authorization
Medium
CVE-2026-57420
Author Box WP Lens <= 2.1.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-57405
Open Shop <= 1.7.1 - Missing Authorization
Medium
CVE-2026-57423
Message Filter for Contact Form 7 <= 1.6.3.8 - Reflected Cross-Site Scripting
Critical
CVE-2026-57697
ProfileGrid – User Profiles, Groups and Communities <= 5.9.9.6 - Unauthenticated Privilege Escalation via Password Reset
High
CVE-2026-57707
Simple Business Directory Pro <= 15.9.4 - Unauthenticated SQL Injection
Medium
CVE-2026-57400
Event Tickets Manager for WooCommerce <= 1.5.5 - Missing Authorization
Medium
CVE-2026-57402
Flexible Refund for WooCommerce – EU One Click Return <= 1.0.51 - Authenticated (Customer+) Stored Cross-Site Scripting
Medium
CVE-2026-11359
Memberships and User Profiles for WooCommerce <= 3.4 - Missing Authorization to Authenticated (Subscriber+) ProfileGrid Plugin Installation and Activation
High
CVE-2026-57416
SiteGround Email Marketing <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57395
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Missing Authorization
Medium
CVE-2026-57422
Bopo – WooCommerce Product Bundle Builder <= 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-57393
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2026-57406
FundEngine – Donation and Crowdfunding Platform <= 1.7.6 - Missing Authorization
High
CVE-2026-57815
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.55.0.2 - Unauthenticated Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.