Medium
CVE-2026-19857
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-86823
Newsletter <= 9.3.6 - Unauthenticated Open Redirect
High
CVE-2026-76552
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-85349
FluentBoards <= 2.0.14 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-74933
GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-77702
Eventin <= 4.1.23 - Missing Authorization
Medium
CVE-2026-84905
Eventin <= 4.1.23 - Missing Authorization
High
CVE-2026-14805
Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX
Critical
b8a7a925-2b9e-43bc-b649-c7ec518e063c
Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type
Medium
CVE-2026-86475
Appointment Hour Booking <= 1.5.94 - Unauthenticated Appointment Slot Capacity Bypass
Medium
CVE-2026-74926
MultiVendorX <= 5.0.15 - Missing Authorization
Medium
CVE-2026-76557
Import Export Lite <= 3.9.32 - Authenticated (Admin+) SQL Injection
High
CVE-2026-85129
Hoo Companion 1.0.2 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-84171
WP images upload on piclect <= 1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-86406
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 4.4.6 - 5.2.7 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-80491
SAMO Forms <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2026-86449
LearnPress <= 4.4.6 - Unauthenticated Information Exposure
Medium
CVE-2026-76555
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2026-85572
Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-87759
Add User Autocomplete < 1.2 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-76558
Import Export Lite <= 3.9.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-78474
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated Information Exposure
Medium
CVE-2026-86447
LearnPress <= 4.4.6 - Unauthenticated Information Exposure
Medium
CVE-2026-88910
KBoard <= 6.6 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.