Medium
CVE-2026-32534
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2026-31920
Product Rearrange for WooCommerce <= 1.2.2 - Unauthenticated SQL Injection
High
CVE-2026-32539
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.23 - Unauthenticated SQL Injection
High
CVE-2026-32538
SMTP Mailer <= 1.1.24 - Unauthenticated Information Exposure
Medium
CVE-2026-32516
Miraculous Core < 2.1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-3572
iTracker360 <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'itracker_license' Settings Field
High
CVE-2026-25371
Lumise Product Designer < 2.0.9 - Unauthenticated SQL Injection
Medium
CVE-2026-2432
CM Custom Reports <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels
Medium
CVE-2026-3550
RockPress <= 1.0.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actions
High
CVE-2026-3658
Appointment Booking Calendar <= 1.6.10.0 - Unauthenticated SQL Injection via 'fields' Parameter
Medium
CVE-2026-42644
BetterDocs <= 4.3.10 - Unauthenticated Information Exposure
High
CVE-2026-24993
Advanced Reporting & Statistics for WooCommerce – Orders, Products & Customers Reporting <= 4.1.3 - Unauthenticated SQL Injection
High
CVE-2026-4338
ActivityPub < 8.0.2 - Unauthenticated Information Epxosure
Medium
CVE-2026-40742
Nelio AB Testing <= 8.2.8 - Unauthenticated Information Exposure
High
CVE-2026-3090
Post SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'
Medium
CVE-2026-2373
Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1049 - Missing Authorization to Unauthenticated Custom Post Type Contents Exposure
High
CVE-2026-2579
WowStore – Store Builder & Product Blocks for WooCommerce <= 4.4.3 - Unauthenticated SQL Injection via 'search' Parameter
Medium
CVE-2026-24977
Organici Library <= 2.1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-45211
APIExperts Square for WooCommerce <= 4.7.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-27039
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-39496
YayMail <= 4.3.3 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2026-32459
UpsellWP – WooCommerce Upsell and Related Products Offers <= 2.2.4 - Authenticated (Shop manager+) SQL Injection
Low
CVE-2026-39542
Doofinder for WooCommerce <= 2.10.13 - Unauthenticated Information Exposure
Medium
CVE-2026-39469
PageLayer <= 2.0.8 - Authenticated (Contributor+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.