Critical
CVE-2026-62104
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-90650
MotoPress Hotel Booking <= 6.2.4 - Unauthenticated Stored Cross-Site Scripting via Stripe Webhook Event Object 'id'
Medium
CVE-2026-90923
Autopay <= 5.0.0 - Missing Authorization
Critical
CVE-2026-88795
wpShopGermany IT-RECHT KANZLEI <= 2.3 - Unauthenticated Remote Code Execution
Critical
CVE-2026-86710
Login with QR <= 1.0.0 - Authentication Bypass
Medium
CVE-2026-87836
Comments Import & Export 2.1.11 - 2.5.3 - Authenticated (Author+) Information Exposure
Medium
CVE-2026-91010
Invisible Anti-Spam & CAPTCHA <= 5.1.0 - Missing Authorization
Medium
CVE-2026-88904
PuppyFW <= 0.4.4 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2026-86801
To Do List Member 1.4 - 1.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-85128
Choose User Role at Registration for WooCommerce <= 1.3.2 - Unauthenticated Privilege Escalation
Medium
CVE-2025-15697
Dictionary <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-91015
Master Addons for Elementor <= 3.1.8 - Missing Authorization
High
CVE-2026-88792
Dictionary <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-87792
Design Scuole Italia <= 2.17.3 - Missing Authorization
High
CVE-2026-87791
Design Scuole Italia <= 2.18.1 - Unauthenticated Arbitrary File Donwload
Medium
CVE-2026-86446
LearnPress 4.4.3 - 4.4.6 - Unauthenticated Information Exposure
Critical
CVE-2026-86709
The Pressengine <= 1.0 - Authentication Bypass
Critical
CVE-2026-86707
Private Feed Key <= 0.1 - Authentication Bypass
High
CVE-2026-87963
Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection
Critical
8898bae3-067c-4505-9a96-05b7a08d90c6
Admin Menu Editor Pro 2.35 - 2.36 - Backdoored Software
Medium
CVE-2026-91011
EWWW Image Optimizer <= 8.7.6 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2026-87786
Dewa Kirim <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-91019
Event Booking Manager for WooCommerce <= 5.5.0 - Missing Authorization
High
CVE-2026-62108
Headless SSO Plugin for WP <= 1.7.0 - Unauthenticated Arbitrary Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.