High
CVE-2026-94683
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2026-96351
Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-96832
Content Egg – Affiliate Product Importer & Price Comparison <= 6.3.1 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2026-85001
EmbedPress 4.4.9 - 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-96831
Themify Builder <= 7.8.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-94120
GravityExport Lite for Gravity Forms <= 2.7.2 - Missing Authorization
High
CVE-2026-89193
Robin Image Optimizer 2.0.0 - 2.0.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-90953
Image Optimizer by Elementor <= 1.7.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-96820
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2026-75873
Zella <= 2.6.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-85415
Audio Player Block 1.1.0 - 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-91072
EWWW Image Optimizer <= 8.7.0 - Authenticated (Administrator+) Cross-Site WebP File Deletion or Rename
Medium
CVE-2026-93580
InPost for WooCommerce 1.7.5 - 1.9.7 - Missing Authorization
Medium
CVE-2026-89190
Robin Image Optimizer <= 2.0.7 - Missing Authorization
Medium
CVE-2026-91832
Mobile Menu 2.7.4 - 2.8.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2026-82127
Schema & Structured Data for WP & AMP <= 1.66 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2026-91051
EWWW Image Optimizer 8.6.0 - 8.7.7 - Authenticated (Author+) PHP Object Injection
Medium
CVE-2026-96815
Vitepos – Point of Sale (POS) for WooCommerce <= 3.5.0 - Authenticated (Custom Role+) Privilege Escalation
Medium
CVE-2026-75824
User Frontend 2.5.8 - 4.3.11 - Missing Authorization
Medium
CVE-2026-96886
Course Booking System <= 7.0.8 - Unauthenticated Information Exposure
Medium
CVE-2026-93771
Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 3.5.2 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2026-1661
Mail Logging <= 1.16.0 - Cross-Site Scripting to Unauthenticated Arbitrary HTML Content Injection in Admin Log
Medium
CVE-2026-87777
Hostinger Reach 1.0.6 - 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-83560
New User Approve 3.1.0 - 3.2.9 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.