Medium
CVE-2026-40730
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2026-22515
VegaDays - Vegetarian Food Festival & Eco Event WordPress Theme <= 1.2.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-22480
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More <= 2.3.3 - Authenticated (Shop manager+) PHP Object Injection
High
CVE-2026-22505
Morning Records - Music Sound Studio WordPress Theme <= 1.2 - Unauthenticated PHP Object Injection
High
CVE-2026-27095
Bus Ticket Booking with Seat Reservation <= 5.6.2 - Unauthenticated PHP Object Injection
High
CVE-2026-22500
m2 | Construction and Tools Store <= 1.1.2 - Unauthenticated PHP Object Injection
Critical
CVE-2026-27098
Au Pair Agency - Babysitting & Nanny Theme <= 1.2.2 - Unauthenticated PHP Object Injection
Critical
CVE-2026-2599
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
High
CVE-2026-22497
Jardi | Winery, Vineyard & Wine Shop WordPress Theme <= 1.7.2 - Unauthenticated PHP Object Injection
High
CVE-2026-22474
Equestrian Centre <= 1.5 - Unauthenticated PHP Object Injection
High
CVE-2026-22475
Estate <= 1.3.4 - Unauthenticated PHP Object Injection
High
CVE-2026-22471
Secudeal Payments for Ecommerce <= 1.1 - Unauthenticated PHP Object Injection
High
CVE-2026-22473
Dental Clinic <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-22501
Mounthood | Ski and Snowboarding HTML Template <= 1.3.2 - Unauthenticated PHP Object Injection
High
CVE-2026-1273
PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints
High
CVE-2026-22454
Solaris <= 2.5 - Unauthenticated PHP Object Injection
High
CVE-2025-54001
Classter <= 2.5 - Unauthenticated PHP Object Injection
High
CVE-2026-22451
Handyman <= 1.4 - Unauthenticated PHP Object Injection
High
CVE-2026-27338
Car Zone <= 3.7 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-24385
Podlove Web Player <= 5.9.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-22453
Pets Club <= 2.3 - Unauthenticated PHP Object Injection
High
CVE-2026-22417
Grand Wedding < 3.1.11 - Unauthenticated PHP Object Injection
High
CVE-2026-28025
Stargaze <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-27998
Vixus - Business Startup Elementor Template Kit <= 1.0.16 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.