High
CVE-2026-29186
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-32443
Product Feed PRO for WooCommerce <= 13.5.2 - Cross-Site Request Forgery
Medium
CVE-2026-22480
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More <= 2.3.3 - Authenticated (Shop manager+) PHP Object Injection
High
CVE-2026-22509
Gioia <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-22505
Morning Records - Music Sound Studio WordPress Theme <= 1.2 - Unauthenticated PHP Object Injection
High
CVE-2026-22503
Nelson <= 1.2.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22499
Lella <= 1.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22498
Laurent - Elegant Restaurant WordPress Theme <= 3.1 - Unauthenticated Local File Inclusion
High
CVE-2026-22484
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.5.0 - Unauthenticated SQL Injection
High
CVE-2026-27095
Bus Ticket Booking with Seat Reservation <= 5.6.2 - Unauthenticated PHP Object Injection
Medium
CVE-2026-2830
WP All Import <= 4.0.0 - Reflected Cross-Site Scripting via 'filepath'
High
CVE-2026-22496
Hypnotherapy - Psychologist Theme <= 1.2.10 - Unauthenticated Local File Inclusion
High
CVE-2026-22508
Dentalux | Dentist & Healthcare Site Template <= 3.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22504
ProLingua <= 1.1.12 - Unauthenticated Local File Inclusion
High
CVE-2026-22495
Greenville | Private School & University Education WordPress Theme <= 1.3.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69347
Subscription for WooCommerce – WordPress Recurring Payments Plugin <= 1.8.10 - Authenticated (Customer+) Insecure Direct Object Reference
Medium
CVE-2026-2025
Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more < 1.19.5 - Unauthenticated Information Disclosure
Medium
CVE-2026-22491
My auctions allegro <= 3.6.34 - Reflected Cross-Site Scripting
High
CVE-2026-22494
Good Homes <= 1.3.13 - Unauthenticated Local File Inclusion
High
CVE-2026-22485
My Album Gallery <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2026-22493
Gaspard <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22500
m2 | Construction and Tools Store <= 1.1.2 - Unauthenticated PHP Object Injection
High
CVE-2026-27093
Tripgo < 1.5.6 - Unauthenticated Local File Inclusion
High
CVE-2026-22513
Triompher | Golf Course & Sports Club WordPress Theme <= 1.1.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.