High
CVE-2026-14352
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-14327
AR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' Parameter
High
CVE-2026-7311
TinyPNG <= 3.6.13 - Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta
High
CVE-2026-57800
Overworld - eSports and Gaming WordPress Theme <= 1.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57798
NewsPlus Shortcodes <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57789
Aqua <= 5.1.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57799
Nuss - Hotel Booking WordPress <= 1.3.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57803
Struktur Core <= 2.5.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57795
Kitchor <= 1.4.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57792
Dør - Modern Architecture and Interior Design Theme <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57801
SetSail - Travel Agency WordPress Theme <= 2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57805
Tonda <= 2.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57788
Aalto <= 1.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57802
Struktur - Creative Agency WordPress Theme <= 2.5.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57793
Flow <= 1.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57748
Shopify <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57796
Leedo <= 3.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57749
SportsPress Pro <= 2.7.29 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57794
Golo Framework <= 1.7.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57791
Brook - Agency Business Creative WordPress Theme <= 2.9.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57790
Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57804
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-13251
Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter
Medium
CVE-2026-9145
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.