Medium
CVE-2026-97303
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
High
CVE-2026-103352
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Unauthenticated SQL Injection
High
CVE-2026-97283
Advanced Post Manager <= 4.5.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-97309
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1226 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-97070
Cozy Blocks – Website Builder for WordPress Block Editor | Gutenberg Blocks, Patterns & Templates <= 2.2.23 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-97305
Hyve Lite – AI Chatbot Trained on WordPress Posts, Pages, Products & More with ChatGPT <= 2.0.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-103334
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.24 - Unauthenticated Information Exposure
Medium
CVE-2026-97304
Timetics – Appointment Booking Calendar & Scheduling <= 1.0.63 - Missing Authorization
Medium
CVE-2026-100515
Photo Reviews for WooCommerce <= 1.2.30 - Reflected Cross-Site Scripting
High
CVE-2026-103085
WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory <= 2.9.20 - Unauthenticated Privilege Escalation
Medium
CVE-2026-103086
UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.74 - Missing Authorization
Medium
CVE-2026-100509
RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress <= 4.1225 - Authenticated (Customer+) Stored Cross-Site Scripting
Medium
CVE-2026-102383
Lookzy LookBook for WooCommerce <= 1.1.14 - Missing Authorization
High
CVE-2026-94415
Betheme <= 28.5.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-97275
BuildKit – Product Builder for WooCommerce – Custom PC Builder <= 1.0.28 - Unauthenticated Cart Data Manipulation
Medium
CVE-2026-94299
elegro Crypto Payment <= 1.0.1 - Missing Authorization
Medium
CVE-2026-95597
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.5.17 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2026-94278
File Media Renamer <= 1.3 - Missing Authorization
High
CVE-2026-96330
tagDiv Opt-In Builder <= 1.7.6 - Unauthenticated SQL Injection
Medium
CVE-2026-94271
Deema Payment Gateway <= 1.1.2 - Unauthenticated Payment Bypass
High
CVE-2026-96809
EduAdmin Booking < 6.0.0 - Unauthenticated SQL Injection
Medium
CVE-2026-86786
Slider Pro <= 1.0.0 - Unauthenticated Information Exposure
Medium
CVE-2026-89289
Fast Courier <= 5.2.3 - Missing Authorization
High
CVE-2026-94166
UpSolution Core <= 8.44 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.