Unrated
CVE-2026-16640
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Unrated
CVE-2026-16639
drupal/i18n_sso - SA-CONTRIB-2026-081
Unrated
CVE-2026-16638
drupal/media_folders - SA-CONTRIB-2026-080
High
CVE-2026-9713
Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload
High
CVE-2026-7534
SUMO Reward Points for WooCommerce <= 32.7.0 - Unauthenticated Stored Cross-Site Scripting via 'reason' Parameter
High
CVE-2026-7232
FormCraft <= 3.9.14 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters
Medium
CVE-2026-45820
fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives
Medium
CVE-2026-27391
Directory Listings WordPress plugin – uListing <= 2.2.0 - Missing Authorization
Medium
CVE-2026-65488
LA-Studio Element Kit for Elementor <= 1.6.2 - Cross-Site Request Forgery
Medium
CVE-2026-65457
ЮKassa для WooCommerce <= 2.16.1 - Missing Authorization
High
CVE-2026-65466
JetBooking <= 4.1.2 - Authenticated (Custom+) Server-Side Request Forgery
Medium
CVE-2026-65471
Avada Core <= 5.15.6 - Cross-Site Request Forgery
High
CVE-2026-59544
Thrive Quiz Builder <= 10.9.3.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-65487
Photography <= 7.7.6 - Missing Authorization
Medium
CVE-2026-24537
WP Accessibility Helper (WAH) <= 0.6.6 - Cross-Site Request Forgery
Medium
CVE-2026-25466
WP Go Maps – Google Map, OpenStreetMap, Leaflet Map <= 10.1.05 - Missing Authorization
Medium
CVE-2026-65460
افزونه پرداخت امن زرینپال برای ووکامرس (ZarinPal for WooCommerce) <= 5.1.0 - Cross-Site Request Forgery
Medium
CVE-2026-65478
ListingPro Plugin <= 2.9.10 - Missing Authorization
Medium
CVE-2026-65505
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Unauthenticated Information Exposure
Medium
CVE-2026-27423
Participants Database <= 2.7.8.4 - Missing Authorization
Medium
CVE-2026-27355
Ditty – Responsive News Tickers, Sliders, and Lists <= 3.1.66 - Missing Authorization
Medium
CVE-2026-59524
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.6.7 - Missing Authorization
Medium
CVE-2026-27422
YT Player – Embed and Customize Video Players <= 2.0.9 - Missing Authorization
High
CVE-2026-65461
Really Simple CSV Importer <= 1.3 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.