High
CVE-2026-22485
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2026-22493
Gaspard <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22500
m2 | Construction and Tools Store <= 1.1.2 - Unauthenticated PHP Object Injection
High
CVE-2026-27093
Tripgo < 1.5.6 - Unauthenticated Local File Inclusion
High
CVE-2026-22513
Triompher | Golf Course & Sports Club WordPress Theme <= 1.1.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22502
Mr. Cobbler | Custom Shoemaking & Footwear Repairs WordPress Theme <= 1.1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-2893
Page and Post Clone <= 6.3 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter
Medium
CVE-2026-3072
Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification
Medium
CVE-2026-3523
Apocalypse Meow <= 22.1.0 - Authenticated (Administrator+) SQL Injection via 'type' Parameter
Medium
CVE-2026-3034
OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls
Medium
CVE-2026-2899
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
High
CVE-2026-2365
Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission
High
CVE-2026-1720
WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
High
CVE-2026-22477
Felizia | Fertility Center & Medical WordPress Theme <= 1.3.4 - Unauthenticated Local File Inclusion
Critical
CVE-2026-27098
Au Pair Agency - Babysitting & Nanny Theme <= 1.2.2 - Unauthenticated PHP Object Injection
High
CVE-2026-1321
Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level'
High
CVE-2026-22478
FindAll - Business Directory WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-27326
AC Services | HVAC, Air Conditioning & Heating Company WordPress <= 1.2.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32442
e2pdf <= 1.28.15 - Missing Authorization
Critical
CVE-2026-2599
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
High
CVE-2026-22497
Jardi | Winery, Vineyard & Wine Shop WordPress Theme <= 1.7.2 - Unauthenticated PHP Object Injection
Medium
CVE-2026-22467
DeepDigital – Web Design Agency WordPress Theme <= 1.0.2 - Reflected Cross-Site Scripting
High
CVE-2026-22474
Equestrian Centre <= 1.5 - Unauthenticated PHP Object Injection
High
CVE-2026-27097
CasaMia | Property Rental Real Estate WordPress Theme <= 1.1.2 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.