Medium
CVE-2026-46406
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-45794
OpenAM has Unsafe Java Deserialization via SNS
Unrated
pysec-2026-233
Malicious code in gpsea (PyPI)
Unrated
pysec-2026-231
Malicious code in embiggen (PyPI)
Medium
CVE-2026-13226
Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter
High
CVE-2026-47110
Tiptap contains an input validation vulnerability resulting in DoS
Medium
CVE-2026-56060
Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 - Unauthenticated Information Exposure
Medium
CVE-2026-57312
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-57619
Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-56064
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-56062
Quotes llama <= 3.1.5 - Unauthenticated SQL Injection
Medium
CVE-2026-10599
Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass
High
CVE-2026-57658
TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder <= 4.2.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-57622
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System <= 3.0.14 - Missing Authorization
Medium
CVE-2026-56066
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.11.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-12978
FunnelKit <= 3.15.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-9710
Cornerstone < 7.8.8 - Missing Authorization
Medium
CVE-2026-56051
TablePress – Tables in WordPress made easy <= 3.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-57430
SEOPress PRO <= 9.1.1 - Missing Authorization
Medium
CVE-2026-11866
LatePoint <= 5.6.2 - Cross-Site Request Forgery
Medium
CVE-2026-8379
Frontend File Manager Plugin <= 23.6 - Missing Authorization to Unauthenticated File Download
High
CVE-2026-56057
Uncanny Automator Pro <= 7.3.0.6 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2026-12585
Abandoned Cart Lite for WooCommerce <= 6.8.1 - Unauthenticated Privilege Escalation via Weak Recovery Link
Medium
CVE-2026-12395
Job Portal <= 2.5.4 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.