High
f20ead74-6db0-4bd2-82f6-0eb792288d70
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-78277
FluentCRM PRO <= 3.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2026-28167
Super Forms – Drag & Drop Form Builder <= 6.3.315 - Unauthenticated Arbitrary File Read
Critical
CVE-2026-78284
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.42 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2026-16747
Kirki – Freeform Page Builder, Website Builder & Customizer < 6.2.1 - Unauthenticated Remote Code Execution
Medium
CVE-2026-13176
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.21 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-32559
UltimateAI <= 3.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-77693
Order Tip for WooCommerce < 1.6.0 - Authenticated (Shop Manager+) Arbitrary File Deletion
Critical
CVE-2026-28171
WooCommerce File Approval <= 10.7 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2026-18781
Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated Remote Code Execution
Critical
CVE-2026-32477
ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2026-32560
MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2026-78269
Shared Files – File Upload & Download Manager <= 1.7.69 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-18027
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter
Critical
CVE-2026-18937
Broken Link Checker < 2.4.12 - Unauthenticated Remote Code Execution
High
CVE-2026-16616
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read
High
CVE-2026-15049
Depicter — Popup & Slider Builder < 4.8.0 - Authenticated (Editor+) Arbitrary File Upload
Critical
CVE-2026-75860
JSON Options <= 0.0.4 - Unauthenticated Remote Code Execution
High
CVE-2026-13405
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Administrator+) Remote Code Execution
Critical
CVE-2026-78003
Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys
High
CVE-2026-66670
Mane <= 1.7 - Unauthenticated Local File Inclusion
Medium
CVE-2026-18044
Estatik Real Estate Plugin < 4.3.4 - Unauthenticated Mail Relay
High
CVE-2026-28151
Tonda - Elegant Shop WordPress Theme < 2.6 - Unauthenticated Local File Inclusion
High
CVE-2026-74016
Smart Cleaning <= 4.8.6 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.