Medium
CVE-2026-94499
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-93512
JW Player for WordPress <= 2.3.11 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97250
Geo Mashup <= 1.13.21 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-96818
WP Express Checkout (Fast Payments via PayPal & Stripe) <= 2.4.9 - Missing Authorization
Medium
CVE-2026-94122
Responsive Slider Gallery – Responsive Image Photo Slider <= 1.5.5 - Authenticated (Editor+) PHP Object Injection
High
CVE-2026-96822
Books Gallery – Book Showcase, Library & Affiliate Plugin <= 4.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-96819
oik <= 4.15.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-13718
Tabs Responsive <= 2.5 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2026-96200
Payments for Hubtel <= 1.0.1 - Missing Authorization
Medium
CVE-2026-96450
Pixfort Core < 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-101147
Featured Image from URL (FIFU) Free & Premium <= 6.0.7 - Cross-Site Request Forgery
High
CVE-2026-89296
Pro Like Button <= 1.0 - Unauthenticated SQL Injection
High
CVE-2026-81739
Paytm Payment Gateway <= 2.8.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97242
WEBO MCP <= 3.0.18 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2026-90972
Fusion Lite <= 3.47.0 - Missing Authorization
Medium
CVE-2026-81740
Paytm Payment Gateway <= 2.8.8 - Unauthenticated Payment Bypass
High
CVE-2026-81809
Paytm Payment Gateway <= 2.8.8 - Unauthenticated SQL Injection
Medium
CVE-2026-87970
If-So Dynamic Content 1.8 - 1.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-85005
Popup Maker WP 1.2.2.1 - 1.4.5 - Missing Authorization
Medium
CVE-2026-90974
Fusion Lite 3.37.14 - 3.47.14 - Missing Authorization
Medium
CVE-2026-96255
Payments for Hubtel <= 1.0.1 - Unauthenticated Information Exposure
Medium
CVE-2026-95587
Hostinger Migrator <= 1.0 - Missing Authorization
High
CVE-2026-91828
OMGF <= 6.3.10 - Denial of Service to Unauthenticated Site Availability Exhaustion
Critical
CVE-2026-101148
BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.