High
CVE-2026-13405
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2026-16260
Post Grid, Slider & Carousel Ultimate <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-28164
Easy Elementor Addons – Addons Pack for Elementor Page Builder <= 2.3.7 - Cross-Site Request Forgery
Medium
CVE-2026-19613
ECS – Ele Custom Skin for Elementor < 4.3.10 - Missing Authorization
High
CVE-2026-66612
Aora - Home & Lifestyle Elementor WooCommerce Theme <= 1.3.19 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-32475
Elementor Pro <= 4.2.1 - Unauthenticated Arbitrary File Upload via Upload Field Array Validation Bypass
High
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
Critical
CVE-2026-14596
DynamicKit for Elementor < 1.0.3 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2026-32473
PDF Smart Viewer for Elementor <= 1.0.4 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-17123
Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting
Critical
CVE-2026-18316
Solace Extra <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action
High
CVE-2026-18438
Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch
High
CVE-2026-66667
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-28192
Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-14230
ECS <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-14229
ECS <= 4.3.7 - Missing Authorization to Unauthenticated Private Content Disclosure
Medium
CVE-2026-18807
ECS <= 4.3.7 - Missing Authorization
High
CVE-2026-18039
Essential Addons for Elementor <= 6.7.1 - Unauthenticated Privilege Escalation
Medium
CVE-2026-19088
ShopEngine <= 4.9.2 - Cross-Site Request Forgery
Medium
CVE-2026-19217
Royal Elementor Addons <= 1.7.1064 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
Medium
CVE-2026-66446
If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-0673
Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
High
CVE-2026-65575
Accalia | Dermatology Clinic & Cosmetology WordPress Theme + Elementor <= 1.5.3 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.