Medium
CVE-2026-102399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-97302
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO <= 4.2.3 - Unauthenticated Information Exposure
Medium
CVE-2026-62081
Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce <= 1.14.11 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
b3a4ff32-52a8-4bb0-8bf6-536a89d338e9
WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field
Medium
CVE-2026-97293
Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-27085
Astra <= 4.13.12 - Authenticated (Shop Manager+) Arbitrary CSS Injection
Medium
CVE-2026-91023
Motors – Car Dealership & Classified Listings <= 1.4.123 - Missing Authorization
Medium
CVE-2026-12241
Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97299
Razorpay Payment Links for WooCommerce <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2026-27371
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-92924
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2026-97298
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-62097
Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-62084
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20260810 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97279
Polylang <= 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-62078
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.105 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97262
Visual Composer Website Builder <= 45.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97267
Prevent Files / Folders Access <= 2.6.7 - Missing Authorization
High
CVE-2026-100508
Two Factor <= 0.16.0 - Unauthenticated Denial of Service
Medium
CVE-2026-62083
Creator LMS – WordPress LMS Plugin for Coaches, Cohorts & Course Creators <= 1.2.19 - Authenticated (Subscriber+) Free Paid Course Enrollment
Medium
CVE-2026-102384
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.63 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-97301
Cool FormKit Lite – Advanced Form Builder for Elementor <= 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
53e75c5e-0583-48e4-8440-c6e184247c5a
Virtue Premium <= 4.10.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-94082
Quiz Cat – WordPress Quiz Plugin <= 3.1.1 - Authenticated (Author+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.