Medium
CVE-2026-74004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-74003
RTMForm Builder <= 1.2.7 - Missing Authorization
Medium
CVE-2026-74006
WP Table Builder – Drag & Drop Table Builder <= 2.2.0 - Missing Authorization
Medium
CVE-2026-74007
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 - Unauthenticated Information Exposure
Medium
CVE-2026-74008
Shortcodes and extra features for Phlox theme <= 2.17.22 - Unauthenticated Information Exposure
Medium
CVE-2026-74009
Razorpay for WooCommerce <= 4.8.7 - Unauthenticated Insecure Direct Object Reference
Critical
CVE-2026-15748
Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration
High
CVE-2026-11801
WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint
High
CVE-2026-73366
Easy Google Maps <= 1.13.0 - Unauthenticated PHP Object Injection
High
CVE-2026-73393
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-32549
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More < 6.5 - Missing Authorization
High
CVE-2026-73339
Modern Events Calendar < 7.35.0 - Unauthenticated SQL Injection
Medium
CVE-2026-32466
Gravity Bookings <= 2.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-32463
Sync Post With Other Site <= 1.9.3 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2026-28571
Contact Form to Chat Apps | Click to Chat to Order – FormyChat <= 2.15.7 - Missing Authorization
High
CVE-2026-73360
Chaty Pro <= 3.5.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73367
Easy Google Maps < 1.14.2 - Unauthenticated Arbitrary Remote Script Inclusion
Medium
CVE-2026-15253
Easy Media Replace <= 0.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-11565
Advanced File Manager <= 5.4.12 - Missing Authorization
Medium
CVE-2026-16570
NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected Cross-Site Scripting
High
CVE-2026-14334
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13174
Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Speaker Account Deletion
Medium
CVE-2026-13173
Eventin <= 4.1.20 - Missing Authorization
Medium
CVE-2026-32333
Mayosis Core <= 5.4.7 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.