High
CVE-2026-66612
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-68566
BookingPress Appointment Booking Pro <= 6.0.6 - Unauthenticated SQL Injection
High
CVE-2026-28152
Tonda Core < 2.6 - Unauthenticated Local File Inclusion
High
CVE-2026-74018
Warehouse Cargo <= 2.7.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-66647
Homlisti <= 3.1.2 - Missing Authorization
High
CVE-2026-66682
Abandoned Cart Pro for WooCommerce <= 10.4.0 - Unauthenticated Privilege Escalation
High
CVE-2026-68564
NotificationX Pro <= 3.1.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-19728
Extra Product Options Builder for WooCommerce < 1.2.176 - Missing Authorization
High
CVE-2026-66673
Flatastic - Versatile MultiVendor WordPress Theme <= 2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-74019
EPROLO-Dropshipping <= 2.4.2 - Missing Authorization
High
CVE-2026-17533
All-in-One WP Migration and Backup < 7.108 - Authenticated (Administrator+) Remote Code Execution
Critical
CVE-2026-32475
Elementor Pro <= 4.2.1 - Unauthenticated Arbitrary File Upload via Upload Field Array Validation Bypass
Medium
CVE-2026-17153
AI Agent by SiteGround <= 1.2.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Upload via /generate-content REST Endpoint
High
CVE-2026-75963
Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property
Medium
CVE-2026-74020
Koji <= 2.2.1 - Missing Authorization
Medium
CVE-2026-73394
Stitch Express <= 1.9.1 - Missing Authorization
Critical
CVE-2026-73390
Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation
Medium
CVE-2026-73363
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
High
CVE-2025-15637
Shuffle <= 1.8 - Unauthenticated Local File Inclusion
Medium
CVE-2026-66601
Media Library Assistant <= 3.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-66616
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-61986
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66582
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73387
Resido - Real Estate WordPress Theme <= 1.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.