High
CVE-2026-87909
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2026-86802
To Do List Member <= 1.6 - Unauthenticated Content Injection
Medium
CVE-2026-16777
Store Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter
High
CVE-2026-14323
Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters
Medium
CVE-2026-66608
Unlimited Elements For Elementor <= 2.0.19 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-89278
GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script
Medium
CVE-2026-92400
Payment Gateway for PayPal on WooCommerce <= 9.2.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-12106
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'src' Attribute of <img> Tags
Critical
CVE-2026-84750
Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-19860
JetFormBuilder <= 3.6.5.2 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2026-84091
SUMIT Payment Gateway for WooCommerce <= 3.0.0 - Unauthenticated Payment Bypass
High
CVE-2026-87935
Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action
Critical
CVE-2026-87796
Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload
Medium
CVE-2026-89064
All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header
High
CVE-2026-84738
AF Companion <= 2.1.0 - Authenticated (Shop Manager+) Remote Code Execution
Medium
CVE-2026-85350
UpsellWP <= 2.2.9 - Unauthenticated Payment Bypass
Medium
CVE-2026-85010
RestroPress <= 3.4.5 - Unauthenticated Payment Bypass
High
CVE-2026-88994
All Bootstrap Blocks 1.3.20 - 1.3.31 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-90984
Generate PDF using Contact Form 7 <= 4.2.1 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2026-12793
JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter
Critical
CVE-2026-62104
Migratico Lite <= 2.6.8 - Unauthenticated Remote Code Execution
Critical
CVE-2026-88795
wpShopGermany IT-RECHT KANZLEI <= 2.3 - Unauthenticated Remote Code Execution
High
CVE-2026-87791
Design Scuole Italia <= 2.18.1 - Unauthenticated Arbitrary File Donwload
Medium
CVE-2026-91017
Robokassa payment gateway for Woocommerce <= 1.8.8 - Unauthenticated Payment Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.