Medium
CVE-2026-62063
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-62061
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-102394
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103339
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-102379
BuildKit – Product Builder for WooCommerce – Custom PC Builder <= 1.0.28 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-103345
Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.13 - Unauthenticated Information Exposure
Medium
CVE-2026-103063
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103064
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-102390
AFFI – Affiliate Marketing for WooCommerce <= 1.0.9 - Missing Authorization
Medium
CVE-2026-102382
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.2.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-102381
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.2.0 - Missing Authorization
Medium
CVE-2026-103343
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97297
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program <= 4.6.3 - Missing Authorization
Medium
CVE-2026-103341
Unlimited Elements for Elementor <= 2.0.20 - Missing Authorization
Medium
CVE-2026-103340
Site Reviews <= 8.3.2 - Missing Authorization
Medium
CVE-2026-103338
Unlimited Elements for Elementor <= 2.0.20 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-103067
Memberful – Membership Plugin <= 1.81.0 - Cross-Site Request Forgery
High
CVE-2026-97260
MaxGalleria <= 6.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-100514
REST API Log <= 1.7.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-97269
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-102378
Parallax Section Block – Add Parallax Scrolling Effects to Sections <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97273
Premmerce Wishlist for WooCommerce <= 1.1.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-62073
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions <= 8.5.6 - Missing Authorization
Medium
CVE-2026-97280
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO 3.1.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.