Medium
CVE-2026-104651
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
High
CVE-2026-39752
Job Postings <= 2.8.2 - Authenticated (Contributor+) Arbitrary File Deletion
Medium
CVE-2026-39769
Graphina – Charts and Graphs For Elementor <= 3.1.12 - Missing Authorization
Medium
CVE-2026-87971
If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-104653
Envira Gallery <= 1.16.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-39798
TrueBooker – Appointment Booking and Scheduler System <= 1.2.9 - Missing Authorization to Unauthenticated Settings Update
High
CVE-2026-32568
WooCommerce Designer Pro <= 1.9.33 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2026-32571
Ohio Extra <= 3.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-32581
Mooberry Book Manager 4.16.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-32574
Smart Forms – when you need more than just a contact form <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-32577
Frontend File Manager Plugin <= 23.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-32575
SUMO Affiliates Pro <= 11.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-32576
Faktur Pro for WooCommerce <= 3.2.2 - Authenticated (Customer+) Insecure Direct Object Reference
Medium
CVE-2026-32578
ECPay Ecommerce for WooCommerce <= 1.1.2606090 - Missing Authorization
Critical
CVE-2026-32579
Kognetiks Chatbot <= 2.4.9 - Unauthenticated Arbitrary File Upload
High
CVE-2026-39719
PDF Smart Viewer for Elementor <= 1.0.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-62072
Progress Planner <= 1.10.0 - Missing Authorization
Medium
CVE-2026-95526
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) <= 1.2.2 - Missing Authorization
Medium
CVE-2026-103346
Payflex Payment Gateway <= 2.7.1 - Reflected Cross-Site Scripting
High
CVE-2026-94159
Total Donations <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-32572
WP User Frontend Pro <= 4.2.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-48199
Sermon'e <= 1.0.2 - Missing Authorization
High
CVE-2026-94664
PDF for Contact Form 7 + Drag and Drop Template Builder <= 7.1.0 - Unauthenticated Arbitrary File Read
Medium
CVE-2026-94663
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.