High
CVE-2026-42719
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
bc5886e8-a520-48e4-9976-2e92b37e4bdf
WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Denial of Service via Block Editor URL Details
Medium
b5541170-fd01-4d6d-934c-bfce446b3b55
WordPress Core 4.7.0 - 7.1.2 - Authenticated (Author+) Unauthorized Sticky Post Modification via REST API
Medium
CVE-2026-105877
QA Assistants – Driven by data <= 5.3.0.0 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-62115
KuteShop <= 4.2.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-42722
Frontend Admin by DynamiApps <= 3.29.13 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-62116
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Unauthenticated Stored Cross-Site Scripting
Medium
866f5121-81be-409e-b6d5-81b72bfb5539
WordPress Core 6.5.0 - 7.1.2 - Authenticated (Author+) Second-Order SQL Injection via WXR Export
Medium
CVE-2026-62117
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) <= 1.13.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-66666
WordPress Core 4.7.0 - 7.1.2 - Unauthenticated Sensitive Information Exposure via Comment Feeds
Medium
CVE-2026-105872
Product Configurator for WooCommerce <= 1.7.5 - Authenticated (Shop Manager+) PHP Object Injection
Medium
71f883d7-edf5-409e-92c1-f87f880602d3
WordPress Core 4.7.0 - 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Imgur oEmbed
Medium
CVE-2026-62100
KuteShop <= 4.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-45440
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export <= 9.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-62093
TechOne - Electronics Multipurpose WooCommerce Theme ( RTL Supported ) <= 3.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-42717
Leyka <= 3.32.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-62099
Boutique - Kute Fashion WooCommerce Theme ( RTL Supported ) <= 2.3.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-42712
Qode Tours <= 3.1.3.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-62095
Biolife - Organic Food WordPress Theme ( RTL Supported ) <= 3.2.3 - Reflected Cross-Site Scripting
High
CVE-2026-62096
Biolife - Organic Food WordPress Theme ( RTL Supported ) <= 3.2.3 - Unauthenticated Local File Inclusion
High
CVE-2026-42711
Slider by 10Web – Responsive Image Slider <= 1.2.63 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42715
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.47 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104392
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-42777
Aalto - Architecture and Interior Design WordPress Theme <= 1.8 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.