Medium
CVE-2026-39586
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2026-28128
Verse <= 1.7.0 - Unauthenticated Local File Inclusion
High
CVE-2026-28117
smart SEO <= 2.9 - Unauthenticated Local File Inclusion
High
CVE-2026-28105
Good Energy <= 1.7.7 - Unauthenticated PHP Object Injection
Medium
CVE-2026-32420
GamiPress <= 7.6.6 - Cross-Site Request Forgery
Medium
CVE-2024-10938
OVRI Payment 1.7.0 - Malicious .htaccess directive
High
CVE-2026-28129
Little Birdies | Multipurpose Children PSD Template <= 1.3.16 - Unauthenticated Local File Inclusion
Medium
CVE-2026-28108
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-2356
User Registration & Membership <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
High
CVE-2026-1779
User Registration & Membership <= 5.1.2 - Authentication Bypass
Medium
CVE-2026-2489
TP2WP Importer <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Watched domains' Textarea
High
CVE-2026-1557
WP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via src
High
CVE-2026-22442
Tribe <= 1.7.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-39520
weDocs <= 2.1.18 - Missing Authorization
High
CVE-2026-22436
Helvig <= 1.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22416
FixTeam | Electronics & Mobile Devices Repair WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-22389
Cocco - Kids Store and Baby Shop WordPress Theme <= 2.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22387
Aviana <= 2.1 - Unauthenticated Local File Inclusion
High
CVE-2026-27334
Alchemists <= 4.6.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22418
Great Lotus | Buddhist Temple WordPress Theme + RTL <= 1.3.1 - Unauthenticated Local File Inclusion
High
CVE-2026-22403
Innovio - Multipurpose Landing Page WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
High
CVE-2026-22433
CloudMe | Cloud Storage & File-Sharing WordPress Theme <= 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22394
Evently <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2026-23801
The Issue <= 1.6.11 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.