High
CVE-2026-73347
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
High
CVE-2026-73185
NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection
High
CVE-2026-66590
Tagembed: Social Media Feeds and Customer Reviews Widget <= 7.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-53999
Altair <= 5.2.2 - Missing Authorization
High
CVE-2026-73992
Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
High
CVE-2026-66598
B2Bking <= 5.6.07 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-19842
SAML Single Sign On – SSO Login 4.8.85-5.4.6 - Unauthenticated Privilege Escalation
High
CVE-2026-73354
SimplyRETS Real Estate IDX <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73388
Nikstore Core <= 1.5 - Unauthenticated SQL Injection
High
CVE-2026-28150
Golo Framework < 1.7.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-66668
Community by PeepSo – Download from PeepSo.com <= 9.0.5.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-73183
Maps Marker Pro <= 4.32 - Unauthenticated SQL Injection
High
CVE-2026-73184
Global Gallery - WordPress Responsive Gallery <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66595
WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.80 - Missing Authorization
Critical
CVE-2026-66613
JetEngine <= 3.8.14 - Unauthenticated Remote Code Execution
Medium
CVE-2026-73998
WP w3all phpBB <= 3.0.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-66611
Paymob for WooCommerce <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66677
Leyka <= 3.32.3 - Missing Authorization
Medium
CVE-2026-74012
Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms <= 3.51.0 - Authenticated (Editor+) PHP Object Injection
High
CVE-2026-66604
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.173 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66607
Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66593
Security Plugin, Firewall & Malware Scanner with Auto Removal <= 2.184 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.