High
CVE-2026-1557
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-2498
WP Social Meta <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
Medium
CVE-2026-2499
Custom Logo <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Logo Path Setting
Medium
CVE-2026-2506
EM Cost Calculator <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting via 'customer_name'
Medium
CVE-2026-2694
The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST API
High
CVE-2026-22442
Tribe <= 1.7.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-39520
weDocs <= 2.1.18 - Missing Authorization
High
CVE-2026-22436
Helvig <= 1.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22416
FixTeam | Electronics & Mobile Devices Repair WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-22389
Cocco - Kids Store and Baby Shop WordPress Theme <= 2.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-39693
FSM Custom Featured Image Caption <= 1.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2026-22387
Aviana <= 2.1 - Unauthenticated Local File Inclusion
High
CVE-2026-27334
Alchemists <= 4.6.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22418
Great Lotus | Buddhist Temple WordPress Theme + RTL <= 1.3.1 - Unauthenticated Local File Inclusion
High
CVE-2026-22403
Innovio - Multipurpose Landing Page WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-27354
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-22433
CloudMe | Cloud Storage & File-Sharing WordPress Theme <= 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22394
Evently <= 1.7 - Unauthenticated Local File Inclusion
Medium
CVE-2026-27362
Bakery Autoresponder Addon <= 1.0.6 - Missing Authorization
High
CVE-2026-27363
Bakery Autoresponder Addon <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-32417
Pochipp < 1.18.9 - Missing Authorization
High
CVE-2026-23801
The Issue <= 1.6.11 - Unauthenticated Local File Inclusion
High
CVE-2026-32414
Advanced Woo Labels <= 2.36 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2026-27358
Architecturer < 3.9.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.