Medium
CVE-2026-94174
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-95593
Ultimeter – the Ultimate Progress and Goals Meter <= 3.0.8 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-94124
Shopping Cart & eCommerce Store <= 5.9.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-93773
Mollie Forms <= 2.11.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-93527
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator <= 1.5.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-94679
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.2 - Missing Authorization
Medium
CVE-2026-95522
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.0 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2026-94118
Premium Blocks – Gutenberg Blocks, Patterns & Templates <= 2.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-86583
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
Medium
CVE-2026-94080
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.70 - Missing Authorization
High
CVE-2026-19125
EthPress <= 2.3.5 - Unauthenticated Authentication Bypass
Medium
CVE-2026-94671
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-95602
YITH Request a Quote for WooCommerce < 4.46.1 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-95601
Product Filter for WooCommerce by WBW <= 3.1.7 - Unauthenticated SQL Injection
Medium
CVE-2026-78394
Link Library <= 7.9.5 - Authenticated (Contributor+) Path Traversal
High
CVE-2026-89237
Bluff Post <= 1.1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-96828
Simple Discount Rules for Woocommerce <= 5.18 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-78397
Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-95525
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-95524
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Unauthenticated Unauthorized User Registration
Medium
CVE-2026-96345
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-96827
Admin Notices Manager <= 1.6.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-95523
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Subscription Gate Bypass on Post Submission
Medium
CVE-2026-78393
Link Library <= 7.9.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.