Medium
CVE-2026-77788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-81432
JetStyleManager for Gutenberg < 1.3.9 - Cross-Site Request Forgery
High
CVE-2026-16259
Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation
High
CVE-2026-19116
User Frontend <= 4.3.10 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-16966
Solace Extra < 1.7.0 - Missing Authorization to Unauthenticated Unpublished Site Builder Content Disclosure
Medium
CVE-2026-14835
SOGO Add Script to Individual Pages Header Footer <= 3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-19722
WPvivid — Backup, Migration & Staging < 0.9.133 - Authenticated (Administrator+) Remote Code Execution
Medium
CVE-2026-82607
Profile Builder < 3.16.1 - Unauthenticated Limited File Upload
Critical
CVE-2026-15980
MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token
Critical
CVE-2026-15369
Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout
High
CVE-2026-75807
SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning
High
CVE-2026-76586
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation
Medium
CVE-2026-76546
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-77704
Booking for Appointments and Events Calendar – Amelia 1.2.32 - 2.4.8 - Missing Authorization
Low
CVE-2026-77786
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings < 1.0.277 - Missing Authorization
Medium
CVE-2026-19430
Catfolders Document Gallery Pro < 2.0.7 - Missing Authorization
Medium
CVE-2026-77007
HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Information Exposure
Medium
CVE-2026-80488
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import < 9.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-17522
Newsletters < 4.17 - Cross-Site Request Forgery
Medium
CVE-2026-76547
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor < 4.0.1 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2026-81200
MasterStudy LMS WordPress Plugin – for Online Courses and Education < 3.7.42 - Authenticated (Custom Role+) Insecure Direct Object Reference
Medium
CVE-2026-16600
SmartAIPress <= 1.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2026-79996
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.6 - Authenticated (Custom Role+) Privilege Escalation
High
CVE-2026-17565
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates < 2.7.2 - Unauthenticated Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.