Medium
CVE-2026-65433
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-65439
Ultimate Addons for Contact Form 7 <= 3.5.45 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14872
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.4 - Authenticated (Authenticated+) SQL Injection
Medium
CVE-2026-66428
Google Review Slider <= 18.4 - Cross-Site Request Forgery
High
CVE-2026-65441
GiveWP <= 4.16.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-65442
FormCraft <= 3.9.15 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-16746
MultiVendorX <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Store Owner+) Cross-Store Commission Data Disclosure
Medium
CVE-2026-14939
Visualizer: Tables and Charts Manager <= 4.0.5 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-59558
Booking Calendar <= 11.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-16070
Brizy - Page Builder <= 2.8.18 - Insecure Direct Object Reference to Authenticated (Contributor+) Template Type Update
Medium
CVE-2026-66475
Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2026-16736
User Registration & Membership <= 5.2.5 - Missing Authorization to Unauthenticated Account Creation While Registration Disabled
Medium
CVE-2026-16602
Content Protector (Passster) <= 4.3.5 - Unauthenticated Non-Public Post Content Disclosure
Medium
CVE-2026-15958
Easy Dropbox Integration <= 2.1.0 - Missing Authorization
Medium
CVE-2026-65434
ЮKassa для WooCommerce <= 2.16.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-16583
Orbit Fox by ThemeIsle <= 3.0.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-16035
miniOrange 2FA <= 6.2.6 - Missing Authorization
Critical
CVE-2026-16940
Custom Fields for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-16069
Brizy - Page Builder <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-16067
Event Booking Manager for WooCommerce (Pro) <= 5.0.2 - Unauthenticated Price Manipulation
Medium
CVE-2026-11366
MonsterInsights <= 11.0.0 - Missing Authorization
Medium
CVE-2026-16068
Brizy - Page Builder <= 2.8.18 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-66433
Location Weather <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-66474
Insert Headers and Footers Code – HT Script <= 1.1.8 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.