High
CVE-2026-24974
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-25001
Post Snippets – Custom WordPress Code Snippets Customizer <= 4.0.12 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-24977
Organici Library <= 2.1.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-27043
Photography <= 7.7.5 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2026-25369
Flexmls® IDX Plugin <= 3.15.9 - Reflected Cross-Site Scripting
High
CVE-2026-27048
The Aisle Core <= 2.0.5 - Unauthenticated Local File Inclusion
High
CVE-2026-27040
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-45211
APIExperts Square for WooCommerce <= 4.7.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2026-25470
ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 - Unauthenticated Remote Code Execution
Medium
CVE-2026-32583
Modern Events Calendar <= 7.32.0 - Missing Authorization
Medium
CVE-2026-32462
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-25471
Admin Safety Guard — Login Security & 2FA <= 1.2.9 - Missing Authorization
Low
CVE-2026-25002
LearnPress – Sepay Payment <= 4.0.0 - Missing Authorization
High
CVE-2026-24978
Jobica Core <= 1.4.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-27041
Unlimited Elements for Elementor (Premium) <= 1.4.72 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2026-27047
Curly Core <= 2.1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-27044
TotalPoll for Polls and Contests <= 4.12.0 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-27049
Jobica Core <= 1.4.2 - Missing Authorization
Medium
CVE-2026-32587
WP Easy Pay – Payment and Donation form Builder for Square <= 4.2.11 - Missing Authorization
Medium
CVE-2026-24975
Organici Library <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-24979
Jobica Core <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-27046
StoreCustomizer – A plugin to Customize all WooCommerce Pages <= 2.6.3 - Missing Authorization
Medium
CVE-2026-24980
Visionary Core <= 1.4.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-24973
Support for CitiLights - Real Estate WordPress Theme <= 3.7.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.