Medium
CVE-2026-42721
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-27434
WP Rentals - Booking Accommodation WordPress Theme <= 3.14.2 - Missing Authorization
Medium
CVE-2026-104390
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.27 - Missing Authorization
Medium
CVE-2026-105876
Modula Image Gallery – Photo Grid & Video Gallery <= 3.0.11 - Unauthenticated Information Exposure
Medium
CVE-2026-104393
HappyAddons for Elementor – 160 Elementor Widgets, GSAP Animations & Templates <= 3.50.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-105875
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons <= 4.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-104391
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103075
Hustle – Email Marketing, Lead Generation, Optins, Popups <= 7.8.14.2 - Missing Authorization
Medium
CVE-2026-105873
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-105884
LazyLoad Plugin – Lazy Load Images, Videos, and Iframes <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97294
Media Library Assistant <= 3.41 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-105871
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-42705
Grand News <= 3.4 - Missing Authorization
High
CVE-2026-105318
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-94062
Werkstatt - Creative Portfolio WordPress Theme <= 4.8.3 - Unauthenticated Local File Inclusion
High
CVE-2026-42716
payever – WooCommerce Gateway <= 4.8.2 - Unauthenticated PHP Object Injection
High
CVE-2026-42709
Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-85097
Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter
Medium
CVE-2026-105883
Th Shop Mania <= 1.9.1 - Missing Authorization
High
CVE-2026-62094
TechOne - Electronics Multipurpose WooCommerce Theme ( RTL Supported ) <= 3.0.3 - Unauthenticated Local File Inclusion
High
CVE-2026-105870
WP Associate Post R2 <= 5.0.1 - Unauthenticated Stored Cross-Site Scripting
Low
d27c2393-64b2-4087-aa91-cbfaec644e13
WordPress Core 4.7.0 - 7.1.2 - Conditional Action Hook Injection via Unregistered Post Status or Post Type
Medium
CVE-2026-62118
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Missing Authorization
High
CVE-2026-62092
Armania - Fashion, Furniture, Organic, Food Multipurpose Elementor WooCommerce Theme (RTL Supported) <= 1.4.8 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.