Medium
CVE-2026-66588
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
Medium
CVE-2026-6646
The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter
High
CVE-2025-63076
The7 Elements < 2.7.12 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-11897
The7 — Ultimate WordPress & WooCommerce Theme <= 12.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css'
Medium
CVE-2025-63073
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-63074
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-7726
The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
Medium
CVE-2024-5451
The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Medium
CVE-2023-32123
The7 <= 11.7.3 - Cross-Site Request Forgery
Medium
CVE-2023-29100
The7 <= 11.6.0 - Reflected Cross-Site Scripting
Medium
81ca577d-5337-4d46-94bb-93c230cf0348
The7 — Website and eCommerce Builder for WordPress <= 2.1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.