High
CVE-2026-56032
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-56027
Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools <= 8.0.1 - Authenticated (Customer+) Arbitrary File Upload
Medium
CVE-2026-56029
CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Missing Authorization
Medium
CVE-2026-11567
SureForms <= 2.11.0 - Unauthenticated Payment Amount Bypass
Medium
CVE-2025-15665
BEAF <= 4.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2026-56034
Library Management System <= 3.5.7 - Unauthenticated SQL Injection
Medium
CVE-2026-12271
Tutor LMS <= 3.9.12 - Authenticated (Subscriber+) Insecure Direct Object Reference to Quiz Attemp Modification
Medium
CVE-2026-11963
User Registration & Membership <= 5.2.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Membership Tier Modification
High
CVE-2026-6858
Transbank Webpay < 1.14.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-11964
User Registration & Membership <= 5.2.1 - Unauthenticated PayPal Bypass to Membership Activation
Medium
CVE-2026-12274
Tutor LMS <= 3.9.12 - Authenticated (Instructor+) Insecure Direct Object Reference
Medium
CVE-2026-12273
Tutor LMS <= 3.9.12 - Missing Authorization to Authenticated (Subscriber+) Comment Creation
High
CVE-2026-12582
Library Management System <= 3.5.7 - Unauthenticated SQL Injection
Medium
CVE-2026-12275
Tutor LMS <= 3.9.12 - Authenticated (Subscriber+) Information Disclosure
High
CVE-2026-10551
Breeze Cache <= 2.5.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-12081
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-12396
Job Portal <= 2.5.4 - Missing Authorization
Medium
CVE-2026-7859
Motors – Car Dealership & Classified Listings Plugin < 1.4.110 - Cross-Site Request Forgery
Medium
CVE-2026-10530
Pie Register – User Registration, Profiles & Content Restriction < 3.8.4.10 - Missing Authorization
Medium
CVE-2026-4610
ProfileGrid <= 5.9.9.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Message Content
Medium
CVE-2026-52701
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.2 - Missing Authorization
Medium
CVE-2026-12397
Job Portal <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Email Disclosure
Medium
CVE-2026-12119
Simple File List <= 6.3.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Operations (Deletion / Move / Folder Creation / Download) via 'frontmanage' Shortcode Attribute
High
CVE-2026-11911
Simple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.