Medium
CVE-2026-39691
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-39689
eShipper Commerce <= 2.16.12 - Missing Authorization
Medium
CVE-2026-27406
My Tickets – Accessible Event Ticketing <= 2.1.0 - Unauthenticated Information Exposure
High
CVE-2026-27417
Sweet Date < 4.0.1 - Unauthenticated PHP Object Injection
High
CVE-2026-27390
WeDesignTech Ultimate Booking Addon <= 1.0.1 - Authenticated (Subscriber+) Authentication Bypass
Medium
CVE-2026-27428
Eagle Booking <= 1.3.4.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-27397
Really Simple Security Pro <= 9.5.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Low
CVE-2026-2897
funadmin: XSS through Value argument in Backend Interface component
Low
CVE-2026-2898
funadmin: Deserialization Vulnerability in Backend Endpoint via AuthCloudService getMember Function
Medium
CVE-2026-2896
funadmin has Incorrect Privilege Assignment in its Configuration Handler
Medium
CVE-2026-2894
funadmin exposes sensitive information via getMember function
Low
CVE-2026-2895
funadmin has Weak Password Recovery Mechanism for Forgotten Password
Medium
CVE-2026-39685
The Moneytizer <= 10.0.10 - Missing Authorization
Medium
CVE-2026-32407
WPC Smart Wishlist for WooCommerce <= 5.0.8 - Missing Authorization
Medium
CVE-2026-32406
WPC Product Bundles for WooCommerce <= 8.4.5 - Missing Authorization
Medium
CVE-2026-39686
BSK PDF Manager <= 3.7.2 - Unauthenticated Information Exposure
Medium
CVE-2026-32409
Forminator <= 1.50.2 - Missing Authorization
Medium
CVE-2026-32408
Brizy <= 2.7.23 - Missing Authorization
Medium
CVE-2026-32405
WoodMart <= 8.3.9 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-39509
Directorist <= 8.5.10 - Missing Authorization
Medium
CVE-2026-2385
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay
Medium
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Medium
CVE-2026-26047
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
High
CVE-2026-26045
Moodle has a Remote Code Execution risk via file restore
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.