High
CVE-2026-22424
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2026-22435
ElectroServ | Electrical Repair Service WordPress Theme <= 1.3.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32415
Squeeze <= 1.7.7 - Authenticated (Subscriber+) Directory Traversal
High
CVE-2025-69339
Molla - eCommerce HTML5 Template <= 1.5.16 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32416
PDF Poster <= 2.4.0 - Missing Authorization
High
CVE-2026-22420
Horizon <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2026-23802
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2026-22395
Fiorello - Florist and Flower Shop WordPress Theme <= 1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-39528
Delicious <= 1.9.5 - Missing Authorization
High
CVE-2026-22427
GoTravel <= 2.1 - Unauthenticated Local File Inclusion
High
CVE-2026-32412
Gift Up Gift Cards for WordPress and WooCommerce <= 3.1.7 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-22390
Builderall for WordPress <= 3.0.1 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-22429
Verdure - Organic Tea Shop WordPress Theme <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-22410
Dolcino - Pastry and Cake Shop WordPress Theme <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-27341
TopScorer - Sports WordPress <= 1.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22385
Wolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.9.6 - Unauthenticated Local File Inclusion
Medium
CVE-2026-27361
Responsive Posts Carousel WordPress Plugin <= 15.1 - Missing Authorization
Medium
CVE-2025-69343
Theater for WordPress <= 0.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-27353
Grand News <= 3.4.3 - Reflected Cross-Site Scripting
High
CVE-2026-22415
The Mounty | Hiking Campground & Children Camping WordPress Theme <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-23799
Tutor LMS – eLearning and online course solution <= 3.9.5 - Missing Authorization
High
CVE-2026-22399
Holmes - Digital Agency WordPress Theme <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69338
Riode Core <= 1.6.26 - Unauthenticated SQL Injection
High
CVE-2026-22434
Crown Art | Drawing and Music School WordPress Theme <= 1.2.11 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.