Medium
CVE-2026-24547
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Low
CVE-2026-10753
Site Kit by Google – Analytics, Search Console, AdSense, Speed < 1.176.0 - Missing Authorization to Authenticated (Editor+) Settings Update
High
CVE-2026-56053
EventPrime – Events Calendar, Bookings and Tickets <= 4.3.4.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-56050
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.18 - Missing Authorization
Medium
CVE-2026-57617
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-57431
Featured Image <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2026-56072
Woodmart <= 8.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-9709
Cornerstone < 7.8.9 - Missing Authorization
High
CVE-2026-56049
Post Snippets – Custom WordPress Code Snippets Customizer <= 4.0.19 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-57313
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments <= 4.2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-56067
JetSmartFilters <= 3.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-56059
Travel Booking <= 2.2.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-56044
Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-56058
Quform - WordPress Form Builder <= 2.23.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-7842
Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection
High
CVE-2026-56070
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection
High
CVE-2026-56054
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-10749
Post Duplicator < 3.0.15 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-56048
Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-8172
Simple Basic Contact Form <= 20250114 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-12492
Happy Coders OTP Login for WooCommerce <= 2.7 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2026-10531
AI Share & Summarize < 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-57700
OMGF Pro <= 5.2.6 - Unauthenticated Arbitrary File Upload via @import URL Reflection
Medium
CVE-2026-56069
Toolset Forms <= 2.6.24 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.