High
CVE-2026-1313
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-3335
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload
High
CVE-2026-1648
Performance Monitor <= 1.0.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
High
CVE-2026-3478
Content Syndication Toolkit <= 1.3 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Medium
CVE-2026-2351
Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2026-3474
EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter
High
CVE-2026-3368
Injection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter Name
Critical
CVE-2026-3584
Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process
Critical
CVE-2026-32522
WooCommerce Support Ticket System < 18.5 - Unauthenticated Arbitrary File Deletion
High
CVE-2026-32531
Kunco < 1.4.5 - Unauthenticated Local File Inclusion
High
CVE-2026-32504
VintWood <= 1.1.8 - Unauthenticated Local File Inclusion
High
CVE-2026-32500
MetaMax <= 1.1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-25382
IdealAuto < 3.8.6 - Unauthenticated Local File Inclusion
High
CVE-2026-4302
WowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API
High
CVE-2026-32524
Photo Engine (Media Organizer & Lightroom) <= 6.4.9 - Authenticated (Author+) Arbitrary File Upload
Critical
CVE-2026-31913
Scape - Multipurpose WordPress theme < 1.5.16 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-32496
Spam Protect for Contact Form 7 <= 1.2.9 - Authenticated (Editor+) Arbitrary File Deletion
High
CVE-2026-25381
LoveDate < 3.8.6 - Unauthenticated Local File Inclusion
High
CVE-2026-25379
StreamVid < 6.8.6 - Unauthenticated Local File Inclusion
High
CVE-2026-32503
Trendustry <= 1.1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-25380
Feedy < 2.1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-32537
Visual Portfolio, Photo Gallery & Post Grid <= 3.5.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2026-32523
WPJAM Basic <= 6.9.2 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-32536
Green Downloads <= 2.08 - Authenticated (Subscriber+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.