High
CVE-2026-96567
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filters
Medium
CVE-2026-78364
MW WP Form < 5.1.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2026-78363
MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-8853
MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter
High
CVE-2026-48871
MW WP Form <= 5.1.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-6206
MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter
High
CVE-2026-5436
MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys
High
CVE-2026-4347
MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir
Medium
CVE-2024-24804
MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2023-6559
MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion
Critical
CVE-2023-6316
MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-46206
MW WP Form <= 4.4.5 - Missing Authorization
Medium
CVE-2023-28409
MW WP Form <= 4.4.2 - Directory Traversal via _file_upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.