High
CVE-2026-82183
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
60f5f64a-5347-47f5-afff-b103a8ebd750
Breakdance <= 2.8.1 - Missing Authorization
Medium
CVE-2026-74927
MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 5.0.13 - 5.0.14 - Unauthenticated Information Exposure
Medium
CVE-2026-7877
WP Recipe Maker Premium <= 10.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wprm-call-to-action' Shortcode
Critical
CVE-2026-82970
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2026-66047
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.17.1 - Unauthenticated Arbitrary Plugin Installation via Brute Force
High
CVE-2026-16061
Rest Routes – Custom Endpoints for WordPress REST API <= 5.5.5 - Unauthenticated SQL Injection
Medium
CVE-2026-77782
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure
High
CVE-2026-10195
FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting
Medium
CVE-2026-74010
bbPress <= 2.6.14 - Missing Authorization
Medium
CVE-2026-77793
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
Medium
CVE-2026-83562
WCFM Marketplace – Multivendor Marketplace for WooCommerce <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-10522
MemberHero – Simple User Registration & Login <= 6.9 - Unauthenticated Privilege Escalation
Medium
CVE-2026-77788
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization to Authenticated (Author+) Arbitrary Post/User Meta Overwrite
Medium
CVE-2026-81432
JetStyleManager for Gutenberg < 1.3.9 - Cross-Site Request Forgery
High
CVE-2026-16259
Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
High
CVE-2026-19116
User Frontend <= 4.3.10 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-16966
Solace Extra < 1.7.0 - Missing Authorization to Unauthenticated Unpublished Site Builder Content Disclosure
Medium
CVE-2026-14835
SOGO Add Script to Individual Pages Header Footer <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-19722
WPvivid — Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2026-82607
Profile Builder < 3.16.1 - Unauthenticated Limited File Upload
Critical
CVE-2026-15980
MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token
Critical
CVE-2026-15369
Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout
High
CVE-2026-75807
SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.