High
CVE-2026-13360
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-18391
WooCommerce Subscription < 9.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2026-73356
Breeze Cache <= 2.5.12 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
High
CVE-2026-32553
OttoKit: All-in-One Automation Platform <= 1.1.35 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-73997
Kadence Starter Templates — Predesigned Website Templates <= 2.3.3 - Unauthenticated Denial of Service
High
CVE-2026-32465
Essential Real Estate <= 5.3.3 - Authenticated (Customer+) PHP Object Injection
Medium
CVE-2026-14857
WP Crowdfunding < 2.2.1 - Missing Authorization
Medium
CVE-2026-16253
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid < 1.17.3 - Unauthenticated Information Exposure
Medium
CVE-2026-14213
Booking for Appointments and Events Calendar – Amelia < 2.4.6 - Authenticated (Custom role+) Information Exposure
Medium
CVE-2026-73383
Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels <= 6.6.47 - Authenticated (Shop Manager+) Arbitrary File Downloaf
Medium
CVE-2026-15388
Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager < 0.0.10 - Missing Authorization
High
CVE-2026-32470
FundEngine – Donation and Crowdfunding Platform <= 1.7.9 - Unauthenticated PHP Object Injection
High
CVE-2026-73181
Extra Product Options & Add-Ons for WooCommerce < 7.6 - Unauthenticated Arbitrary File Download
High
CVE-2026-75091
Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-12248
WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
Medium
CVE-2026-19073
Order Sync with Zendesk for WooCommerce < 2.2.3 - Unauthenticated Information Exposure
Medium
CVE-2026-14832
ShopSmart Loyalty for WooCommerce <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure
High
CVE-2026-73382
Site Reviews <= 8.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-73348
GiveWP – Donation Plugin and Fundraising Platform < 4.16.6 - Missing Authorization
High
CVE-2026-13700
WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-18945
WP Helper Premium < 4.7.6 - Unauthenticated Information Exposure
Medium
CVE-2026-18046
Cookie Consent – GDPR & CCPA Cookie Banner & Consent Manager < 0.0.10 - Missing Authorization
Medium
CVE-2026-73995
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.6 - Missing Authorization
Medium
CVE-2026-13328
Food Menu – Restaurant Menu & Online Ordering for WooCommerce < 6.0.2 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.