Medium
CVE-2026-2486
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-2384
Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2026-32393
Greenly Theme Addons < 8.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-39671
Extra Fees Plugin for WooCommerce <= 4.3.3 - Cross-Site Request Forgery
High
CVE-2026-39544
LabtechCO <= 8.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-25385
URL Shortify <= 1.12.3 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2026-32390
Nanosoft < 1.3.2 - Missing Authorization
Medium
CVE-2026-39676
Download Manager <= 3.3.52 - Missing Authorization
Medium
CVE-2026-32387
Checkout for PayPal <= 1.0.46 - Missing Authorization
High
CVE-2026-32392
Greenly <= 8.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-25386
Ally <= 4.0.2 - Missing Authorization
Medium
CVE-2026-39674
MK Google Directions <= 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39675
Court Reservation <= 1.10.11 - Missing Authorization
High
CVE-2026-39677
Emphires <= 3.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-32388
GLB <= 1.2.2 - Missing Authorization
Medium
CVE-2026-25384
WP-Lister Lite for eBay <= 3.8.5 - Missing Authorization
Medium
CVE-2026-25378
Nelio AB Testing <= 8.2.4 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-1368
Video Conferencing with Zoom < 4.6.6 - Missing Authorization
Medium
CVE-2026-39670
Visual Link Preview <= 2.3.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-39672
ShipTime: Discounted Shipping Rates <= 1.1.4 - Missing Authorization
Medium
CVE-2026-39673
iZooto <= 3.7.20 - Missing Authorization
Medium
CVE-2026-32391
SmartFix < 1.2.4 - Missing Authorization
Medium
CVE-2026-2718
Dealia <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes
Medium
CVE-2026-2716
Client Testimonial Slider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.