Medium
CVE-2026-27385
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-27375
Gecko 6.0 - Responsive Shopify Theme - RTL support <= 1.9.8 - Reflected Cross-Site Scripting
High
CVE-2026-27379
NextScripts: Social Networks Auto-Poster <= 4.4.7 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-27383
Metro <= 2.13 - Unauthenticated Local File Inclusion
Medium
CVE-2026-23693
ElementsKit Elementor addons Lite < 3.7.9 - Missing Authorization
Medium
CVE-2026-27373
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.3 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-27381
Aora - Home & Lifestyle Elementor WooCommerce Theme <= 1.3.15 - Unauthenticated Local File Inclusion
High
CVE-2026-27369
Celeste <= 1.3.6 - Unauthenticated PHP Object Injection
Medium
CVE-2026-32411
Embed Calendly <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-40723
Bricks Builder <= 2.1.4 - Missing Authorization
Medium
CVE-2026-39692
tagDiv Composer <= 5.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-27374
WooCommerce Order Details <= 3.1 - Missing Authorization
Medium
CVE-2026-27376
Claue - Clean, Minimal Elementor WooCommerce <= 2.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2026-27396
Directory Pro <= 2.5.6 - Missing Authorization
High
CVE-2026-27439
Dentario <= 1.5 - Unauthenticated PHP Object Injection
Medium
CVE-2026-39687
Rapid Car Check Vehicle Data <= 2.1.2 - Missing Authorization
High
CVE-2026-27413
Profile Builder Pro < 3.14.0 - Unauthenticated SQL Injection
Medium
CVE-2026-39690
Author Avatars List/Block <= 2.1.25 - Missing Authorization
Medium
CVE-2026-27386
DesignThemes Directory Addon <= 1.8 - Missing Authorization
High
CVE-2026-27438
Kingler <= 1.7 - Unauthenticated PHP Object Injection
Medium
CVE-2026-23546
Classified Listing – AI-Powered Classified ads & Business Directory Plugin <= 5.3.4 - Authenticated (Subscriber+) Sensitive Data Exposure
High
CVE-2026-22443
Alliance <= 3.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-27388
DesignThemes Booking Manager <= 2.0 - Missing Authorization
Medium
CVE-2026-27411
SiteGuard WP Plugin <= 1.7.9 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.