Medium
CVE-2026-39775
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2026-39776
Tabs Responsive – With WooCommerce Product Tabs Extension <= 2.5 - Authenticated (Editor+) Remote Code Execution
High
CVE-2026-39790
VikRentCar Car Rental Management System <= 1.4.7 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-39770
Doctreat - Hospitals and Doctors Directory WordPress Listing Theme <= 1.7.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-39767
WPBase Cache <= 5.5.6 - Authenticated (Subscriber+) Denial of Service
High
CVE-2026-75962
Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)
Medium
CVE-2026-66588
The7 — Website and eCommerce Builder for WordPress <= 14.2.2 - Missing Authorization
Medium
CVE-2026-39762
Autoship Cloud for WooCommerce Subscription Products <= 2.17.1 - Missing Authorization
High
CVE-2026-39764
Radius Booking – Appointment Booking Calendar & Scheduling for Services & Events <= 1.0.19 - Unauthenticated SQL Injection
Medium
CVE-2026-39765
PDF Invoices & Packing Slips for WooCommerce – Challan <= 3.7.88 - Authenticated (Shop Manager+) Privilege Escalation
High
CVE-2026-39766
ARforms <= 7.1.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42634
Video Background Block – Add Stunning Video Backgrounds to Any Section <= 2.0.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42636
WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode <= 4.4.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-42638
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.7.1 - Missing Authorization
High
CVE-2026-42418
Social Rocket – Social Sharing Plugin <= 1.3.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42417
ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup <= 7.8 - Unauthenticated SQL Injection
Medium
CVE-2026-42416
uDesign | Multipurpose WordPress Theme <= 4.15.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-42414
ListingPro Plugin <= 2.9.12 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-40806
Blog, Posts and Category Filter for Elementor <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-40807
CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-41555
Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 - Unauthenticated SQL Injection
Medium
CVE-2026-41559
SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 - Unauthenticated Information Exposure
Medium
CVE-2026-41560
WXD Backup Lite <= 1.0.2 - Missing Authorization
Medium
CVE-2026-41561
Museder RestoreOne <= 2.7.276 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.