Medium
CVE-2026-97318
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
Medium
CVE-2026-97285
The Events Calendar <= 6.17.5 - Missing Authorization
Medium
CVE-2026-62080
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates <= 3.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-85016
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97266
Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97282
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO <= 3.1.0 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-94115
Pricing Table WordPress Plugin – Easy Pricing Tables <= 4.1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-97274
OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 - Unauthenticated Authentication Bypass
Medium
CVE-2026-62085
WP Activity Log <= 5.6.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-97317
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure
Medium
CVE-2026-97286
Strong Testimonials <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97067
EWWW Image Optimizer <= 8.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-102399
Photo Gallery – Responsive Image Galleries by Supsystic <= 1.21.0 - Cross-Site Request Forgery
Medium
CVE-2026-97302
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO <= 4.2.3 - Unauthenticated Information Exposure
Medium
CVE-2026-62081
Flexible PDF Coupons – Gift Cards & Vouchers for WooCommerce <= 1.14.11 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
b3a4ff32-52a8-4bb0-8bf6-536a89d338e9
WPML Multilingual & Multicurrency for WooCommerce <= 5.5.7 - Authenticated (Shop Manager+) SQL Injection via Exchange Rate Field
Medium
CVE-2026-97293
Media Library Assistant <= 3.41 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-27085
Astra <= 4.13.12 - Authenticated (Shop Manager+) Arbitrary CSS Injection
Medium
CVE-2026-91023
Motors – Car Dealership & Classified Listings <= 1.4.123 - Missing Authorization
Medium
CVE-2026-12241
Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97299
Razorpay Payment Links for WooCommerce <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2026-27371
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-92924
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2026-97298
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.