Medium
CVE-2026-1671
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-1356
Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src
Medium
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
Critical
CVE-2026-1729
AdForest <= 6.0.12 - Authentication Bypass
Medium
CVE-2026-32348
MAS Videos <= 1.3.2 - Missing Authorization
High
CVE-2025-69405
Lorem Ipsum | Books & Media Store <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-68526
Modal Popup Box <= 1.6.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-39625
TechOne <= 3.0.3 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-69400
Yokoo <= 1.1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69404
Extreme Store <= 1.5.7 - Unauthenticated PHP Object Injection
Medium
CVE-2025-69401
WooODT Lite <= 2.5.5 - Unauthenticated Payment Bypass
Medium
CVE-2025-68501
Mollie Payments for WooCommerce <= 8.1.1 - Reflected Cross-Site Scripting
High
CVE-2026-22344
FiveStar <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69409
PJ | Life & Business Coaching <= 3.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32345
Perfect Portfolio <= 1.2.4 - Missing Authorization
Medium
CVE-2026-39622
Education Base <= 3.0.8 - Missing Authorization
High
CVE-2026-39623
Biolife <= 3.2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-69329
Prestige < 1.4.1 - Unauthenticated PHP Object Injection
High
CVE-2025-69395
Gable <= 1.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32346
Travel Agency <= 1.5.5 - Missing Authorization
Medium
CVE-2026-39626
Armania <= 1.4.8 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-39510
Image Photo Gallery Final Tiles Grid <= 3.6.11 - Authenticated (Author+) Insecure Direct Object Reference
High
CVE-2025-68536
Zota <= 1.3.14 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24959
JS Help Desk <= 3.0.1 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.