Medium
CVE-2016-3954
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-57745
RT-Theme 18 Responsive WordPress Theme <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-14190
Sina Extension for Elementor <= 3.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-57740
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization
Critical
CVE-2026-14289
FacturaONE <= 5.36 - Unauthenticated Remote Code Execution
High
CVE-2026-13400
Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-12394
MemberGlut <= 1.1.4 - Unauthenticated Privilege Escalation
Critical
CVE-2026-14812
Premium SEO - Malicious Plugin
High
CVE-2025-15662
Printcart Web to Print Product Designer for WooCommerce <= 2.5.2 - Unauthenticated Arbitrary File Read
High
CVE-2026-57363
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57729
Flatsome <= 3.20.5 - Missing Authorization
Medium
CVE-2026-10082
Advanced Ads – Ad Manager & AdSense <= 2.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-13597
QRcode Login for WeChat <= 1.3 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2026-57744
RT-Theme 18 Responsive WordPress Theme <= 2.5 - Unauthenticated PHP Object Injection
High
CVE-2026-57732
tagDiv Opt-In Builder <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-57743
RT-Theme 18 Responsive WordPress Theme <= 2.5 - Unauthenticated Local File Inclusion
High
CVE-2026-6101
AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload
High
CVE-2026-57739
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated SQL Injection
Medium
CVE-2026-13726
Multiple Page Generator Plugin – MPG <= 4.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2026-14203
Smart Manager <= 8.91.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-57741
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14189
WPBot AI ChatBot <= 8.5.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-57734
tagDiv Composer <= 5.4.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-57727
Kirki – Freeform Page Builder, Website Builder & Customizer <= 6.2.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.