Medium
CVE-2026-65456
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Critical
CVE-2026-59555
Participants Database <= 2.7.8.3 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-24628
Photo Gallery – Responsive Image Galleries by Supsystic <= 1.16.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2026-65479
Reviewer <= 3.14.2 - Missing Authorization
Medium
CVE-2026-24552
Create <= 2.5.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-65469
AWP Classifieds <= 4.4.7 - Missing Authorization
Medium
CVE-2026-65484
Style Kits <= 2.6.5 - Missing Authorization
Medium
CVE-2026-65454
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.0 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2026-59541
WP BASE Booking of Appointments, Services and Events <= 6.3.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-65489
LA-Studio Element Kit for Elementor <= 1.6.2 - Missing Authorization
Medium
CVE-2026-65522
Manual - Documentation, Knowledge Base & Education WordPress <= 7.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65453
Ebook Store <= 6.19 - Missing Authorization
Medium
CVE-2026-65491
Query Wrangler <= 1.5.57 - Missing Authorization
Medium
CVE-2026-24639
Photo Block – A Modern Image Block With Lightbox and Caption Support <= 1.7.1 - Authenticated (Author+) Sever-Side Request Forgery
Medium
CVE-2026-25424
Mediavine Control Panel <= 2.10.10 - Missing Authorization
Medium
CVE-2026-65473
Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65468
JetBooking <= 4.1.2 - Missing Authorization
Medium
CVE-2026-65550
Tabs Responsive – With WooCommerce Product Tabs Extension <= 2.5 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2026-59547
Payment Gateway for PayPal on WooCommerce <= 9.1.4 - Missing Authorization
High
CVE-2026-65481
Vino <= 1.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-59525
Participants Database <= 2.7.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-65482
LA-Studio Element Kit for Elementor <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-65462
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.2 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2026-59540
SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery <= 3.9.6 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.