High
CVE-2026-65441
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2026-65442
FormCraft <= 3.9.15 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-16746
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure
Medium
CVE-2026-14939
Visualizer: Tables and Charts Manager <= 4.0.5 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-59558
Booking Calendar <= 11.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16070
Brizy - Page Builder <= 2.8.18 - Insecure Direct Object Reference to Authenticated (Contributor+) Template Type Update
Medium
CVE-2026-66475
Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2026-16736
User Registration & Membership <= 5.2.5 - Missing Authorization to Unauthenticated Account Creation While Registration Disabled
Medium
CVE-2026-16602
Content Protector (Passster) <= 4.3.5 - Unauthenticated Non-Public Post Content Disclosure
Medium
CVE-2026-15958
Easy Dropbox Integration <= 2.1.0 - Missing Authorization
Medium
CVE-2026-65434
ЮKassa для WooCommerce <= 2.16.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16583
Orbit Fox by ThemeIsle <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-16035
miniOrange 2FA <= 6.2.6 - Missing Authorization
Critical
CVE-2026-16940
Custom Fields for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-16069
Brizy - Page Builder <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-16067
Event Booking Manager for WooCommerce (Pro) <= 5.0.2 - Unauthenticated Price Manipulation
Medium
CVE-2026-11366
MonsterInsights <= 11.0.0 - Missing Authorization
Medium
CVE-2026-16068
Brizy - Page Builder <= 2.8.18 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-66433
Location Weather <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66474
Insert Headers and Footers Code – HT Script <= 1.1.8 - Cross-Site Request Forgery
Medium
CVE-2026-66434
Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66442
YayPricing <= 3.5.6 - Missing Authorization
Critical
CVE-2026-16548
Bit Assist <= 1.8.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-66427
Google Review Slider <= 18.4 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.