Medium
CVE-2026-22487
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-22488
Dashboard Welcome for Beaver Builder <= 1.0.8 - Missing Authorization
High
CVE-2025-12551
ListingHub 1.2.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-22519
MediaPress <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69349
RSS Feed Widget <= 3.0.2 - Missing Authorization
Medium
CVE-2025-47444
FiboSearch <= 1.32.1 - Missing Authorization
Medium
CVE-2026-22517
GA4WP: Google Analytics for WordPress <= 2.10.0 - Missing Authorization
Medium
CVE-2026-22486
Re Gallery – Responsive Photo Gallery <= 1.18.9 - Missing Authorization
High
CVE-2025-12549
Rozy - Flower Shop <= 1.2.25 - Unauthenticated Local File Inclusion
High
CVE-2025-22708
Mitech <= 2.3.4 - Unauthenticated Local File Inclusion
Medium
CVE-2026-22492
Docket Cache <= 24.07.04 - Missing Authorization
Medium
CVE-2026-23805
Media Search Enhanced <= 0.9.1 - Authenticated (Author+) SQL Injection
High
CVE-2025-14429
AeroLand <= 1.6.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-14358
REHub Framework <= 19.9.5 - Missing Authorization
Medium
CVE-2025-14053
Travel Bucket List <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2025-14109
AH Shortcodes <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'column' Shortcode Attribute
Medium
CVE-2025-14077
Simcast <= 1.0.0 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-14352
Awesome Hotel Booking <= 1.0.3 - Incorrect Authorization to Unauthenticated Arbitrary Booking Modification
Medium
CVE-2025-13722
Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder
Medium
CVE-2025-14112
Snillrik Restaurant <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'menu_style' Shortcode Attribute
Medium
CVE-2025-13974
Email Customizer for WooCommerce | Drag and Drop Email Templates Builder <= 2.6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Email Template Content
Medium
CVE-2025-13849
Cool YT Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2025-14453
My Album Gallery <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style_css' Shortcode Attribute
Medium
CVE-2025-14796
My Album Gallery <= 1.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Image Title
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.