Medium
CVE-2026-65547
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-65504
BOX NOW Delivery Croatia <= 3.3.0 - Missing Authorization
Medium
CVE-2026-65541
Staff Training <= 1.0.7 - Missing Authorization
High
CVE-2026-65545
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-65520
WP OAuth Server ( Login with WordPress ) <= 6.2.0 - Unauthenticated SQL Injection
Medium
CVE-2026-65502
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons <= 8.7.13 - Missing Authorization
Medium
CVE-2026-65543
Vimeo <= 1.2.2 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-65549
Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress <= 3.2.10 - Authenticated (Author+) PHP Object Injection
High
CVE-2026-65517
Easy PayPal & Stripe Buy Now Button <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-15230
YayPricing <= 3.5.6 - Missing Authorization to Authenticated (Subscriber+) Pricing Configuration Modification and Coupon Code Disclosure
High
CVE-2026-65508
Simply Schedule Appointments <= 1.6.12.10 - Unauthenticated SQL Injection
Medium
CVE-2026-25403
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 - Missing Authorization
Medium
CVE-2026-65542
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14.5 - Missing Authorization
High
CVE-2026-65548
Betheme <= 28.5.7 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-61959
Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.24 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-65544
Social Share, Social Login and Social Comments Plugin – Super Socializer <= 7.14.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-15016
Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-16773
WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
Medium
CVE-2026-16774
WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action
High
CVE-2026-13440
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'message_popup' Parameter
Medium
CVE-2026-13110
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via bogo_category_msg_create AJAX Action
High
CVE-2026-15025
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
Medium
CVE-2026-15444
Tutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' Parameter
Medium
CVE-2026-15411
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.0 - Missing Authorization to Unauthenticated Options Update via create_popup AJAX Action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.