Medium
CVE-2026-39663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-13113
Web Accessibility by accessiBe <= 2.11 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-23545
Aruba HiSpeed Cache <= 3.0.4 - Missing Authorization
High
CVE-2025-12845
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation
High
CVE-2026-23544
Valenti <= 5.6.3.5 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-32373
SMS Alert Order Notifications <= 3.9.0 - Missing Authorization
Medium
CVE-2026-32380
Numinous <= 1.3.0 - Missing Authorization
Medium
CVE-2025-14864
Virusdie <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) API Key Disclosure
Medium
CVE-2026-32370
Influencer <= 1.1.7 - Missing Authorization
Medium
CVE-2026-39588
NM Gift Registry and Wishlist Lite <= 5.13 - Missing Authorization
Medium
CVE-2026-32377
Pranayama Yoga <= 1.2.2 - Missing Authorization
Medium
CVE-2026-32376
Kalon <= 1.2.9 - Missing Authorization
Medium
CVE-2026-0549
Groups <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' Shortcode
Medium
CVE-2026-25375
Image Photo Gallery Final Tiles Grid <= 3.6.10 - Missing Authorization
Medium
CVE-2025-13738
Easy Table of Contents <= 2.0.78 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-12707
Library Management System <= 3.2.1 - Unauthenticated SQL Injection
Medium
CVE-2026-32381
App Landing Page <= 1.2.2 - Missing Authorization
Medium
CVE-2026-32371
Elegant Pink <= 1.3.3 - Missing Authorization
Medium
CVE-2026-32385
RegistrationMagic <= 6.0.7.6 - Missing Authorization
Medium
CVE-2025-13842
Breadcrumb NavXT <= 7.5.0 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2025-13079
Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens
Medium
CVE-2026-32379
Rara Academic <= 1.2.2 - Missing Authorization
Medium
CVE-2026-23541
Mail Mint <= 1.19.4 - Missing Authorization
Medium
CVE-2026-1461
Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.