Medium
CVE-2026-65569
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-18960
Block User Account <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Account Block Bypass
Medium
CVE-2026-15237
Hotel Booking Lite <= 6.2.2 - Missing Authorization
High
CVE-2026-14860
Podcast Player <= 8.3.0 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2026-12586
Lenxel WP <= 1.0.31 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2026-66684
Export Import Menus <= 1.9.2 - Unauthenticated Information Exposure
High
CVE-2026-14836
Login & Register Forms – Popup, Slider, Profile & WooCommerce < 3.2.5 - Authentication Bypass via Brute Force
High
CVE-2026-65579
Agricola - Agriculture & Organic Farm Theme <= 1.21.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-66706
Subscribe to Comments <= 2.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-17021
Salon Booking System – Free Version <= 10.30.33 - Missing Authorization
Medium
CVE-2026-66686
Plugins Garbage Collector (Database Cleanup) <= 0.14 - Cross-Site Request Forgery
High
CVE-2026-61965
Geeky Bot – AI Sales Assistant for WooCommerce <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-16256
POUCO Import Users <= 1.0.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-32469
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress <= 7.6.0 - CAPTCHA Bypass
Medium
CVE-2026-66683
Custom CSS and JavaScript <= 2.0.16 - Unauthenticated Information Exposure
High
CVE-2026-65573
Abelle <= 1.22 - Unauthenticated PHP Object Injection
Medium
CVE-2026-65580
Agrion <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-17022
Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure
Medium
CVE-2026-13389
webtoffee-cookie-consent < 3.5.3 - Missing Authorization
High
CVE-2026-19049
ProSolution WP Client <= 2.0.8 - Unauthenticated SQL Injection
Critical
CVE-2026-65570
OTP Login With Phone Number, OTP Verification <= 1.8.70 - OTP Brute Force
High
CVE-2026-65577
Advice - Psychology, Therapy & Counseling Theme <= 1.18.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-61981
Simple Link Directory Pro - AI Powered <= 15.0.8 - Cross-Site Request Forgery
High
CVE-2026-16949
Term Pages <= 1.0.0 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.