Medium
CVE-2026-65458
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-65465
JetElements <= 2.9.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-59545
miniOrange Discord Integration <= 2.2.4 - Missing Authorization
Medium
CVE-2026-65450
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68081
WP-Polls <= 2.77.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2026-27403
Hubbub Lite <= 1.36.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65486
Event Post <= 6.1.0 - Missing Authorization
Medium
CVE-2026-65472
Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages <= 3.3.5 - Missing Authorization
Medium
CVE-2026-16063
Event Booking Manager for WooCommerce <= 5.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-65456
Product Slider, Product Grid, Product Masonry <= 1.13.62 - Authenticated (Contributor+) Insecure Direct Object Reference
Critical
CVE-2026-59555
Participants Database <= 2.7.8.3 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-24628
Photo Gallery – Responsive Image Galleries by Supsystic <= 1.16.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2026-65479
Reviewer <= 3.14.2 - Missing Authorization
Medium
CVE-2026-24552
Create <= 2.5.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-65469
AWP Classifieds <= 4.4.7 - Missing Authorization
Medium
CVE-2026-65484
Style Kits <= 2.6.5 - Missing Authorization
Medium
CVE-2026-65454
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.0 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2026-59541
WP BASE Booking of Appointments, Services and Events <= 6.3.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-65489
LA-Studio Element Kit for Elementor <= 1.6.2 - Missing Authorization
Medium
CVE-2026-65522
Manual - Documentation, Knowledge Base & Education WordPress <= 7.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65453
Ebook Store <= 6.19 - Missing Authorization
Medium
CVE-2026-65491
Query Wrangler <= 1.5.57 - Missing Authorization
Medium
CVE-2026-24639
Photo Block – A Modern Image Block With Lightbox and Caption Support <= 1.7.1 - Authenticated (Author+) Sever-Side Request Forgery
Medium
CVE-2026-25424
Mediavine Control Panel <= 2.10.10 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.