Medium
CVE-2026-16603
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-61953
Simple Link Directory Pro <= 15.0.6 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-16546
Wired Impact Volunteer Management <= 2.8.1 - Missing Authorization
Medium
CVE-2026-16613
GDPR Cookie Compliance <= 5.0.0 - Cross-Site Request Forgery
Medium
CVE-2026-14848
Paid Member Subscriptions <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Cross-User Subscription Hijack
Medium
CVE-2026-59560
FundEngine <= 1.7.8 - Missing Authorization
Medium
CVE-2026-14824
Quiz And Survey Master <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-16293
Blubrry PowerPress <= 11.16.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-16942
Custom HTML Pages <= 0.6.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-15256
Ninja Forms <= 3.14.9 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-66473
Xendit Payment <= 7.2.0 - Missing Authorization
Medium
CVE-2026-66445
Open User Map <= 1.4.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-16993
DHL for WooCommerce <= 4.0.0 - Unauthenticated Shipping Label Disclosure
Medium
CVE-2026-15671
SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter
Medium
CVE-2026-16968
GeoDirectory <= 2.8.167 - Information Exposure to Authenticated (Contributor+) User Email Disclosure
Medium
CVE-2026-16981
DHL for WooCommerce <= 4.0.0 - Insecure Direct Object Reference to Unauthenticated Shipping Label Download
High
CVE-2026-65440
GetGenie <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-65448
Anti Spam and list cleaner – AcyChecker <= 1.8.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-10526
EmbedPress <= 4.6.0 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2026-14816
The GDPR Framework <= 2.3.0 - Missing Authorization
Medium
CVE-2026-66448
Gallery PhotoBlocks <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66476
Easy Digital Downloads <= 3.6.9 - Authenticated (Admin) Arbitrary File Deletion
Medium
CVE-2026-15233
Nested Pages <= 3.2.14 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2026-16547
REST API Log <= 1.7.0 - Missing Authorization to Unauthenticated Sensitive Log Data Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.