Medium
CVE-2026-14931
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2026-14929
JS Help Desk <= 3.1.3 - Missing Authorization to Authenticated (Subscriber+) Ticket Reply Modification
Medium
CVE-2026-14921
Ultimate Addons for WPBakery Page Builder <= 3.21.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-14554
Check & Log Email <= 2.0.14 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-14319
GiveWP <= 4.16.2 - Unauthenticated Recurring Donor Information Disclosure
Medium
CVE-2026-15048
GeekyBot <= 1.2.7 - Unauthenticated Information Exposure
Medium
CVE-2026-14936
Simple Membership <= 4.7.6 - Unauthenticated Payment Verification Bypass
Medium
CVE-2026-15209
JS Help Desk – AI-Powered Support & Ticketing System <= 3.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Cross-User Support Ticket Disclosure
Medium
CVE-2026-8155
BuddyPress <= 14.4.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Private Messages Disclosure
High
CVE-2026-14333
Demi - One Click Demo Import, Backup & Site Migration <= 0.0.6 - Unauthenticated Sensitive Data Exposure
Medium
CVE-2026-12901
GetPaid <= 2.8.54 - Unauthenticated Payment Bypass
Medium
CVE-2026-12501
Travel Engine <= 6.8.1 - Unauthenticated Payment Bypass
Medium
CVE-2026-14843
Events Made Easy <= 3.1.3 - Insecure Direct Object Reference to Unauthenticated Person Data Modification
Medium
CVE-2026-14849
Paid Member Subscriptions <= 3.0.6 - Unauthenticated Information Exposure
High
CVE-2026-4259
Ultimate Auction Pro <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-15258
Product Feed Manager for WooCommerce <= 7.6.0 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2026-15982
Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'
Medium
CVE-2026-14927
FluentCart <= 1.5.2 - Insecure Direct Object Reference to Unauthenticated Order PII Disclosure
Medium
CVE-2026-14833
Lightbox with PhotoSwipe <= 5.8.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-9341
Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'user_id' Parameter
Medium
CVE-2026-14930
JS Help Desk – AI-Powered Support & Ticketing System < 3.1.4 - Unauthenticated Arbitrary Media Upload
Medium
CVE-2026-14834
Mailgun for WordPress <= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Mailgun List Subscription
Unrated
871
Balbooa Forms (com_baforms) - Other
Unrated
870
Balbooa Forms (com_baforms) - Other
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.