High
CVE-2026-39647
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-39645
GlobalPayments WooCommerce <= 1.18.3 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-1793
Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2026-32357
Simple Blog Card <= 2.37 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-1249
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request Forgery
Critical
CVE-2026-1306
midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action
Medium
CVE-2026-0745
User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter
High
CVE-2026-1988
Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute
Medium
CVE-2026-39630
Getty Images <= 4.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-32353
MailerPress <= 1.4.2 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2026-42641
Share This Image <= 2.14 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-1356
Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src
High
CVE-2025-69400
Yokoo <= 1.1.11 - Unauthenticated Local File Inclusion
High
CVE-2026-22344
FiveStar <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69409
PJ | Life & Business Coaching <= 3.0.0 - Unauthenticated Local File Inclusion
High
CVE-2026-39623
Biolife <= 3.2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-69395
Gable <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-68536
Zota <= 1.3.14 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32349
Embed PDF Viewer <= 2.4.7 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-69403
Bravis Addons <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-69399
Cobble <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-68545
Nika <= 1.2.14 - Unauthenticated Local File Inclusion
High
CVE-2025-68539
Fana <= 1.1.35 - Unauthenticated Local File Inclusion
High
CVE-2025-68543
Diza <= 1.3.15 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.