Medium
CVE-2026-65512
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2026-16274
Classified Listing <= 5.4.3 - Missing Authorization
Medium
CVE-2026-65529
Graphina – Charts and Graphs For Elementor <= 3.1.12 - Missing Authorization
Medium
CVE-2026-59537
Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-16534
Import and export users and customers <= 2.4.1 - Authenticated (Admin+) Privilege Escalation
Medium
CVE-2026-15236
Gallery for Google Photos <= 1.2.0 - Unauthenticated Google OAuth Token Disclosure
Medium
CVE-2026-59546
WP Ghost (Hide My WP Ghost) – Security & Firewall <= 7.0.06 - Two-Factor Authentication Bypass
Medium
CVE-2026-65514
Appointment Hour Booking – Booking Calendar <= 1.5.86 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65530
TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder <= 4.2.2 - Missing Authorization
Medium
CVE-2026-65531
Qubely – Advanced Gutenberg Blocks <= 1.8.14 - Missing Authorization
Medium
CVE-2026-59528
ShipTime: Discount Shipping <= 1.1.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-59534
Post My CF7 Form <= 6.2.0 - Missing Authorization
High
CVE-2026-65510
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-15254
Simply Schedule Appointments <= 1.6.12.10 - Missing Authorization to Authenticated (Contributor+) Sensitive Data Disclosure
High
CVE-2026-59538
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.9.7 - Unauthenticated SQL Injection
High
CVE-2026-59549
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 - Unauthenticated SQL Injection
High
CVE-2026-59526
MapSVG <= 8.14.0 - Unauthenticated SQL Injection
Medium
CVE-2026-59532
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 - Unauthenticated Price Maniputlation
High
CVE-2026-65511
Manual - Documentation, Knowledge Base & Education WordPress <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-59539
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.7 - Insecure Direct Object Reference
Medium
CVE-2026-65535
TinyMCE Templates <= 4.8.1 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-65528
BSK PDF Manager <= 3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-65493
Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-65525
Civi Framework <= 2.2.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.