High
CVE-2026-39544
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-25385
URL Shortify <= 1.12.3 - Authenticated (Author+) Server-Side Request Forgery
High
CVE-2026-32392
Greenly <= 8.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-39677
Emphires <= 3.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-39670
Visual Link Preview <= 2.3.0 - Authenticated (Contributor+) Server-Side Request Forgery
Critical
CVE-2026-1405
Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2026-0926
Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]
High
CVE-2025-13603
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) Arbitrary File Read via .htaccess Manipulation
Medium
CVE-2025-12500
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload
Medium
CVE-2025-12884
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missing Authorization to Authenticated (Subscriber+) Ad Placements Update
Medium
CVE-2025-12375
Printful Integration for WooCommerce <= 2.2.11 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-32384
WpBookingly <= 1.2.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-2426
WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter
Low
CVE-2026-2419
WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'download_path' Parameter
Medium
CVE-2026-1860
Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure
High
CVE-2026-2296
Product Addons for Woocommerce – Product Options with Custom Fields <= 3.1.0 - Authenticated (Shop Manager+) Code Injection via Conditional Logic 'operator' Parameter
High
CVE-2026-2019
Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting
Medium
CVE-2026-1857
Gutenberg Blocks with AI by Kadence WP <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'endpoint' Parameter
High
CVE-2026-22370
Marveland <= 1.3.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-1317
WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name
High
CVE-2026-22368
Redy <= 1.0.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22372
Isida <= 1.4.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22366
Jude <= 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22380
UnlimHost <= 1.2.3 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.