Medium
CVE-2026-65485
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-65498
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Unauthenticated Information Exposure
Medium
CVE-2026-59554
Ziina <= 1.2.21 - Missing Authorization
Medium
CVE-2026-61954
PayU CommercePro Plugin <= 3.8.9 - Missing Authorization
Medium
CVE-2026-65483
HashThemes Demo Importer <= 1.4.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-65470
Fluent Support – Helpdesk & Customer Support Ticket System <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-27064
Mailster - Email Newsletter Plugin for WordPress <= 4.1.17 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2026-65497
Complianz – GDPR/CCPA Cookie Consent <= 7.5.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2026-65476
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.2.4 - Missing Authorization
Medium
CVE-2026-65474
Ninja Tables – Easy Data Table Builder <= 5.2.10 - Unauthenticated Information Exposure
Medium
CVE-2026-27418
WP Fast Total Search – The Power of Indexed Search <= 1.81.282 - Missing Authorization
Medium
CVE-2026-65464
GiveWP – Donation Plugin and Fundraising Platform <= 4.16.3 - Cross-Site Request Forgery
Medium
CVE-2026-65452
Ebook Store <= 6.19 - Missing Authorization
Medium
CVE-2026-65467
JetEngine <= 3.8.11 - Authenticated (Contributor+) Sever-Side Request Forgery
Medium
CVE-2026-27377
QuickCal <= 1.0.16 - Missing Authorization
Medium
CVE-2026-65490
Create <= 2.6.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-65451
MapSVG <= 8.14.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-65503
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65480
TheGem <= 5.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65449
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-59542
Kali Forms — Contact Form & Drag-and-Drop Builder <= 2.4.18 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-65455
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-65463
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 2.3.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-25427
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.7.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.