High
CVE-2026-32568
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-32571
Ohio Extra <= 3.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-32581
Mooberry Book Manager 4.16.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-32574
Smart Forms – when you need more than just a contact form <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-32577
Frontend File Manager Plugin <= 23.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-32575
SUMO Affiliates Pro <= 11.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-32576
Faktur Pro for WooCommerce <= 3.2.2 - Authenticated (Customer+) Insecure Direct Object Reference
Medium
CVE-2026-32578
ECPay Ecommerce for WooCommerce <= 1.1.2606090 - Missing Authorization
Critical
CVE-2026-32579
Kognetiks Chatbot <= 2.4.9 - Unauthenticated Arbitrary File Upload
High
CVE-2026-39719
PDF Smart Viewer for Elementor <= 1.0.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-62072
Progress Planner <= 1.10.0 - Missing Authorization
Medium
CVE-2026-95526
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) <= 1.2.2 - Missing Authorization
Medium
CVE-2026-103346
Payflex Payment Gateway <= 2.7.1 - Reflected Cross-Site Scripting
High
CVE-2026-94159
Total Donations <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-32572
WP User Frontend Pro <= 4.2.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-48199
Sermon'e <= 1.0.2 - Missing Authorization
High
CVE-2026-94664
PDF for Contact Form 7 + Drag and Drop Template Builder <= 7.1.0 - Unauthenticated Arbitrary File Read
Medium
CVE-2026-94663
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-96332
Simple Payment <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-94666
Generate PDF using Contact Form 7 <= 4.2.1 - Unauthenticated Arbitrary File Read
High
CVE-2026-94668
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104747
Haaken <= 1.5 - Unauthenticated PHP Object Injection
Medium
CVE-2026-94667
JetReviews <= 3.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-32580
WooCommerce Lottery <= 2.2.9 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.