High
CVE-2026-42418
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,415
High
CVE-2026-42417
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 7.8 - Unauthenticated SQL Injection
Medium
CVE-2026-42416
uDesign | Multipurpose WordPress Theme <= 4.15.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-42414
ListingPro Plugin <= 2.9.12 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-40806
Blog, Posts and Category Filter for Elementor <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-40807
CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-41555
Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 - Unauthenticated SQL Injection
Medium
CVE-2026-41559
SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 - Unauthenticated Information Exposure
Medium
CVE-2026-41560
WXD Backup Lite <= 1.0.2 - Missing Authorization
Medium
CVE-2026-41561
Museder RestoreOne <= 2.7.276 - Unauthenticated Information Exposure
Medium
CVE-2026-41562
Norvis Backup <= 1.1.0 - Unauthenticated Information Exposure
Medium
CVE-2026-41563
Sitemovr <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2026-42413
Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 - Unauthenticated Information Exposure
Medium
CVE-2026-105072
Fluent Booking Pro < 2.5.0 - Missing Authorization
Medium
CVE-2026-25434
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden <= 3.5.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-25433
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden <= 3.5.7 - Missing Authorization
High
CVE-2026-39750
StoreGrowth – Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39760
Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder <= 5.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39761
Meta Box AIO <= 3.7.1 - Unauthenticated Privilege Escalation
Medium
CVE-2026-97300
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization
Medium
CVE-2026-105421
Kit (formerly ConvertKit) for WooCommerce <= 2.2.0 - Missing Authorization
Medium
CVE-2026-39723
Morning for WooCommerce <= 2.4.1 - Missing Authorization
High
CVE-2026-39724
HTTP Requests Manager <= 1.3.11 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39731
Database for CF7 <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.