Medium
CVE-2026-62142
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Low
CVE-2026-105195
Booking Calendar 10.15 - 11.8.2 - Authenticated (Editor+) Information Exposure
Medium
CVE-2026-105887
Robo Gallery – Photo & Image Slider <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-94246
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments < 2.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-105888
Event Tickets and Registration <= 5.30.0.1 - Missing Authorization
Medium
CVE-2026-94245
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments < 2.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-105196
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress < 5.6.9 - Authenticated (Custom Role+) Insecure Direct Object Reference
Medium
CVE-2026-105886
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets <= 4.5.5 - Missing Authorization
Medium
CVE-2026-105878
YITH WooCommerce Product Bundles <= 2.29.0 - Missing Authorization
Medium
CVE-2026-106611
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.57.3 - Cross-Site Request Forgery
Medium
CVE-2026-27420
Zotpress <= 7.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-105194
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy < 3.7.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-105890
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.7.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-86828
BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2026-105197
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress < 5.6.5 - Authenticated (Custom Role+) Insecure Direct Object Reference
Medium
CVE-2026-105891
Event Tickets and Registration <= 5.30.0.1 - Missing Authorization
Medium
CVE-2026-86827
BackWPup – WordPress Backup & Restore Plugin 3.3 - 5.7.6 - Missing Authorization
Medium
CVE-2026-105079
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-105260
Database Addon For WPForms ( wpforms entries ) – WPFormsDB < 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2026-86826
BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Unauthenticated Information Exposure
High
CVE-2026-103309
GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI < 2.34.14 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66479
WPComplete <= 2.9.5.6 - Cross-Site Request Forgery
Medium
CVE-2026-94244
Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments < 2.8.0 - Missing Authorization
Medium
CVE-2026-103070
ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF <= 6.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.