Medium
CVE-2026-76555
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-85572
Tutor LMS <= 4.0.7 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-87759
Add User Autocomplete < 1.2 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-76558
Import Export Lite <= 3.9.32 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-78474
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated Information Exposure
Medium
CVE-2026-86447
LearnPress <= 4.4.6 - Unauthenticated Information Exposure
Medium
CVE-2026-88910
KBoard <= 6.6 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-82126
Schema & Structured Data for WP & AMP <= 1.65 - Missing Authorization
Medium
CVE-2026-89327
FluentBoards <= 2.0.14 - Authenticated (Board Member+) Comment Author Spoofing
Medium
CVE-2026-82519
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.8.1 - Missing Authorization to 2FA Bypass
Medium
CVE-2026-89328
FluentBoards <= 2.0.14 - Missing Authorization
Medium
CVE-2026-86445
LearnPress <= 4.4.6 - Unauthenticated Information Exposure
Medium
CVE-2026-87860
Subscriptions for WooCommerce <= 2.0.2 - Cross-Site Request Forgery
Medium
CVE-2026-85641
Formidable Forms <= 6.34 - Unauthenticated Content Injection
High
CVE-2026-78472
Ni WooCommerce Sales Report <= 4.1.0 - Unauthenticated SQL Injection
Medium
CVE-2026-77705
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation
High
CVE-2026-84829
Optimole <= 4.2.11 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-84047
Album Cover Finder <= 0.7.0 - Unauthenticated SQL Injection
Medium
CVE-2026-87828
Seraphinite Accelerator <= 2.29.23 - Authenticated (Subscriber+) Full Admin Area Denial of Service
High
CVE-2026-13407
Royal Elementor Addons <= 1.7.1066 - Unauthenticated Arbitrary HTML Injection in Notification Emails
High
CVE-2026-80494
Yogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File Read
High
CVE-2026-85681
WP Component <= 2.2.4 - Unauthenticated Privilege Escalation
Medium
CVE-2026-87842
Zonify – Amazon Product Importer for WooCommerce < 1.0.5 - Unauthenticated Information Exposure
Medium
CVE-2026-76553
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Path Traversal to Arbitrary Directory Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.