Low
CVE-2026-3339
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-2421
ilGhera Carta Docente for WooCommerce <= 1.5.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'cert' Parameter
High
CVE-2026-4267
Query Monitor <= 3.20.3 - Reflected Cross-Site Scripting via Request URI
Medium
CVE-2026-39521
Nelio Content <= 4.3.1 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-14545
YML for Yandex Market < 5.0.26 - Authenticated (Shop Manager+) Remote Code Execution
High
CVE-2026-25447
Widget Wrangler <= 2.3.9 - Authenticated (Author+) Remote Code Execution
Medium
CVE-2026-42644
BetterDocs <= 4.3.10 - Unauthenticated Information Exposure
High
CVE-2026-25446
Wishlist Member <= 3.32.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-25457
Mixtape <= 2.1 - Unauthenticated Local File Inclusion
High
CVE-2026-1463
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion
High
CVE-2026-25458
Moments <= 2.2 - Unauthenticated Local File Inclusion
High
CVE-2026-25464
Jannah - Newspaper Magazine News BuddyPress AMP <= 7.6.4 - Unauthenticated Local File Inclusion
High
CVE-2026-25001
Post Snippets – Custom WordPress Code Snippets Customizer <= 4.0.12 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-27043
Photography <= 7.7.5 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2026-27048
The Aisle Core <= 2.0.5 - Unauthenticated Local File Inclusion
High
CVE-2026-27040
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2026-25470
ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 - Unauthenticated Remote Code Execution
High
CVE-2026-27041
Unlimited Elements for Elementor (Premium) <= 1.4.72 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2026-27047
Curly Core <= 2.1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-27044
TotalPoll for Polls and Contests <= 4.12.0 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-39464
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.19.8 - Authenticated (Editor+) Server-Side Request Forgery
Critical
CVE-2026-3891
Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload
High
CVE-2026-27067
Mobile App Editor – WordPress to Android App Builder <= 1.3.1 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2026-27065
BuilderPress <= 2.0.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.