High
CVE-2026-59549
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-59526
MapSVG <= 8.14.0 - Unauthenticated SQL Injection
Medium
CVE-2026-59532
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation
High
CVE-2026-65511
Manual - Documentation, Knowledge Base & Education WordPress <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-59539
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.7 - Insecure Direct Object Reference
Medium
CVE-2026-65535
TinyMCE Templates <= 4.8.1 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-65528
BSK PDF Manager <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-65493
Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-65525
Civi Framework <= 2.2.0 - Missing Authorization
Medium
CVE-2026-65527
LIQUID SPEECH BALLOON <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-59551
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-65495
Dokan Pro <= 5.0.3 - Missing Authorization
Medium
CVE-2026-65519
Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.29 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-65526
Visualizer – Tables & Charts Manager with Built-in AI Generator <= 4.0.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-59527
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Unauthenticated SQL Injection
High
CVE-2026-65492
Dokan Pro <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-65540
Popup for CF7 with Sweet Alert <= 1.6.5 - Cross-Site Request Forgery
High
CVE-2026-59550
AWP Classifieds <= 4.4.7 - Unauthenticated SQL Injection
Medium
CVE-2026-59529
Ebook Store <= 6.19 - Unauthenticated Information Exposure
Medium
CVE-2026-65534
Custom links in Elementor Image Carousel <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-27372
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Information Exposure
Medium
CVE-2026-59535
Thrive Themes – Product Manager <= 10.9.2 - Missing Authorization
Medium
CVE-2026-65494
Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-59530
Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.