High
CVE-2026-42716
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-42709
Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-85097
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
Medium
CVE-2026-105883
Th Shop Mania <= 1.9.1 - Missing Authorization
High
CVE-2026-62094
TechOne - Electronics Multipurpose WooCommerce Theme ( RTL Supported ) <= 3.0.3 - Unauthenticated Local File Inclusion
High
CVE-2026-105870
WP Associate Post R2 <= 5.0.1 - Unauthenticated Stored Cross-Site Scripting
Low
d27c2393-64b2-4087-aa91-cbfaec644e13
WordPress Core 4.7.0 - 7.1.2 - Conditional Action Hook Injection via Unregistered Post Status or Post Type
Medium
CVE-2026-62118
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Missing Authorization
High
CVE-2026-62092
Armania - Fashion, Furniture, Organic, Food Multipurpose Elementor WooCommerce Theme (RTL Supported) <= 1.4.8 - Unauthenticated Local File Inclusion
High
CVE-2026-42719
Dynamic User Directory <= 2.4 - Authenticated (Subscriber+) PHP Object Injection
Medium
bc5886e8-a520-48e4-9976-2e92b37e4bdf
WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Denial of Service via Block Editor URL Details
Medium
b5541170-fd01-4d6d-934c-bfce446b3b55
WordPress Core 4.7.0 - 7.1.2 - Authenticated (Author+) Unauthorized Sticky Post Modification via REST API
Medium
CVE-2026-105877
QA Assistants – Driven by data <= 5.3.0.0 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-62115
KuteShop <= 4.2.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-42722
Frontend Admin by DynamiApps <= 3.29.13 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-62116
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
Medium
866f5121-81be-409e-b6d5-81b72bfb5539
WordPress Core 6.5.0 - 7.1.2 - Authenticated (Author+) Second-Order SQL Injection via WXR Export
Medium
CVE-2026-62117
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-66666
WordPress Core 4.7.0 - 7.1.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds
Medium
CVE-2026-105872
Product Configurator for WooCommerce <= 1.7.5 - Authenticated (Shop Manager+) PHP Object Injection
Medium
71f883d7-edf5-409e-92c1-f87f880602d3
WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed
Medium
CVE-2026-62100
KuteShop <= 4.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-45440
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export <= 9.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-62093
TechOne - Electronics Multipurpose WooCommerce Theme ( RTL Supported ) <= 3.0.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.