High
CVE-2026-27085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-91023
Motors – Car Dealership & Classified Listings <= 1.4.123 - Missing Authorization
Medium
CVE-2026-12241
Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-97299
Razorpay Payment Links for WooCommerce <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2026-27371
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-92924
Unlimited Elements For Elementor <= 2.0.20 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2026-97298
King Addons for Elementor – 100+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce Builder, Mega Menu, Popup Builder <= 51.1.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-62097
Business Directory Plugin – Easy Listing & Member Directories for WordPress <= 6.4.27 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-62084
User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20260810 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97279
Polylang <= 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-62078
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.105 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97262
Visual Composer Website Builder <= 45.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97267
Prevent Files / Folders Access <= 2.6.7 - Missing Authorization
High
CVE-2026-100508
Two Factor <= 0.16.0 - Unauthenticated Denial of Service
Medium
CVE-2026-62083
Creator LMS – WordPress LMS Plugin for Coaches, Cohorts & Course Creators <= 1.2.19 - Authenticated (Subscriber+) Free Paid Course Enrollment
Medium
CVE-2026-102384
Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder <= 2.5.63 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-97301
Cool FormKit Lite – Advanced Form Builder for Elementor <= 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
53e75c5e-0583-48e4-8440-c6e184247c5a
Virtue Premium <= 4.10.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-94082
Quiz Cat – WordPress Quiz Plugin <= 3.1.1 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-97219
MStore API 4.21.1 - 4.22.0 - Authenticated (Subscriber+) Payment Bypass
Medium
CVE-2026-97287
Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection
Medium
3d2daf20-df96-4514-9ceb-93d86b690734
Virtue Premium <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97261
Notivo Notification for WooCommerce <= 1.4.2 - Unauthenticated Information Exposure
Medium
CVE-2026-100513
CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.