Medium
CVE-2026-66601
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-66616
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-61986
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66582
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73387
Resido - Real Estate WordPress Theme <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-73347
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation
High
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
High
CVE-2026-73185
NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection
High
CVE-2026-66590
Tagembed: Social Media Feeds and Customer Reviews Widget <= 7.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-53999
Altair <= 5.2.2 - Missing Authorization
High
CVE-2026-73992
Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
High
CVE-2026-66598
B2Bking <= 5.6.07 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-19842
SAML Single Sign On – SSO Login 4.8.85-5.4.6 - Unauthenticated Privilege Escalation
High
CVE-2026-73354
SimplyRETS Real Estate IDX <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73388
Nikstore Core <= 1.5 - Unauthenticated SQL Injection
High
CVE-2026-28150
Golo Framework < 1.7.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-66668
Community by PeepSo – Download from PeepSo.com <= 9.0.5.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-73183
Maps Marker Pro <= 4.32 - Unauthenticated SQL Injection
High
CVE-2026-73184
Global Gallery - WordPress Responsive Gallery <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-66595
WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.80 - Missing Authorization
Critical
CVE-2026-66613
JetEngine <= 3.8.14 - Unauthenticated Remote Code Execution
Medium
CVE-2026-73998
WP w3all phpBB <= 3.0.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-66611
Paymob for WooCommerce <= 4.1.10 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.