High
CVE-2026-97271
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-97259
Pay with Vipps and MobilePay for WooCommerce <= 6.2.4 - Unauthenticated Insecure Direct Object Reference
Critical
CVE-2026-94389
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Remote Code Execution
High
CVE-2026-94081
Persistent Login <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-100507
If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-102386
WP Photo Album Plus <= 9.3.02.003 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-102396
Ultimate Maps by Supsystic <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-102398
Smart Popup by Supsystic <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-102395
Easy Google Maps <= 1.14.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97289
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97272
Premmerce Permalink Manager for WooCommerce <= 2.3.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-97270
CMB2 <= 2.13.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97318
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Open Redirect
Medium
CVE-2026-97285
The Events Calendar <= 6.17.5 - Missing Authorization
Medium
CVE-2026-62080
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates <= 3.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-85016
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97266
Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97282
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.0 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-94115
Pricing Table WordPress Plugin – Easy Pricing Tables <= 4.1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-97274
OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 - Unauthenticated Authentication Bypass
Medium
CVE-2026-62085
WP Activity Log <= 5.6.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-97317
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure
Medium
CVE-2026-97286
Strong Testimonials <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97067
EWWW Image Optimizer <= 8.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.