High
CVE-2026-62099
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2026-62096
Biolife - Organic Food WordPress Theme ( RTL Supported ) <= 3.2.3 - Unauthenticated Local File Inclusion
High
CVE-2026-42777
Aalto - Architecture and Interior Design WordPress Theme <= 1.8 - Unauthenticated Local File Inclusion
High
CVE-2026-89417
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feed
Critical
CVE-2026-42696
SiteVault – Backup, Restore, Migration & Cloning <= 1.5.18 - Unauthenticated Remote Code Execution
Critical
CVE-2026-39802
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.13 - Unauthenticated Remote Code Execution
High
CVE-2026-105701
ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template
High
CVE-2026-39776
Tabs Responsive – With WooCommerce Product Tabs Extension <= 2.5 - Authenticated (Editor+) Remote Code Execution
Critical
CVE-2026-39770
Doctreat - Hospitals and Doctors Directory WordPress Listing Theme <= 1.7.0 - Unauthenticated Arbitrary File Upload
High
CVE-2026-39725
Content Visibility for Divi Builder <= 5.03 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-39728
Instapage Plugin <= 3.7.2 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-39754
Piotnet Addons For Elementor <= 7.1.71 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2026-39755
WP Duplicate – WordPress Migration Plugin <= 1.1.11 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-39757
Taskbot <= 6.6 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-102387
XServer Migrator <= 1.6.6 - Unauthenticated Information Exposure
Medium
CVE-2026-82212
Nexi XPay Build 7.2.2 - 7.6.2 - Unauthenticated Payment Bypass
High
CVE-2026-39759
Workreap Core <= 3.4.5 - Authenticated (Employer / Sales Representative+) Arbitrary File Upload
High
CVE-2026-104677
Coder 4.0 - 4.5.1 - Authenticated (Editor+) Remote Code Execution
Critical
CVE-2026-39792
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-97354
PowerPress 11.13.12 - 11.17.9 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-105322
Magee Shortcodes <= 2.1.1 - Unauthenticated Mail Relay
Medium
CVE-2026-104401
Memberful – Membership Plugin <= 1.81.2 - Authenticated (Contributor+) Protected Post Content Disclosure
High
CVE-2026-39752
Job Postings <= 2.8.2 - Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2026-32568
WooCommerce Designer Pro <= 1.9.33 - Authenticated (Subscriber+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.