Medium
CVE-2026-94118
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-86583
Import and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile Fields
Medium
CVE-2026-94080
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 2.1.70 - Missing Authorization
High
CVE-2026-19125
EthPress <= 2.3.5 - Unauthenticated Authentication Bypass
Medium
CVE-2026-94671
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-95602
YITH Request a Quote for WooCommerce < 4.46.1 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-95601
Product Filter for WooCommerce by WBW <= 3.1.7 - Unauthenticated SQL Injection
Medium
CVE-2026-78394
Link Library <= 7.9.5 - Authenticated (Contributor+) Path Traversal
High
CVE-2026-89237
Bluff Post <= 1.1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-96828
Simple Discount Rules for Woocommerce <= 5.18 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-78397
Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-95525
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-95524
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Unauthenticated Unauthorized User Registration
Medium
CVE-2026-96345
Estatik Real Estate Plugin <= 4.3.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-96827
Admin Notices Manager <= 1.6.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-95523
User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Subscription Gate Bypass on Post Submission
Medium
CVE-2026-78393
Link Library <= 7.9.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-94672
Safe SVG <= 2.5.0 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2026-93529
WSP MCP – WordPress MCP – Connect Claude, codex, antigravity or any other AI Agent <= 2.7.0 - Missing Authorization to Authenticated (Contributor+) Unauthorized Post and Media Modification
Medium
CVE-2026-94457
Captcha Code <= 3.32 - Unauthenticated Login Captcha Protection Bypass
Medium
CVE-2026-11871
Team Showcase Supreme <= 9.2 - Unauthenticated Information Exposure
Medium
CVE-2026-94077
Safe SVG <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-95514
Netgsm <= 2.10.0 - Missing Authorization
Medium
CVE-2026-96346
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.9 - Authenticated (Author+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.