Medium
CVE-2026-39751
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2026-39754
Piotnet Addons For Elementor <= 7.1.71 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2026-39756
Appointment Bookings for Zoom GoogleMeet and more – Wappointment <= 2.7.7 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-39755
WP Duplicate – WordPress Migration Plugin <= 1.1.11 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-39753
Taskbot <= 6.6 - Unauthenticated Privilege Escalation
High
CVE-2026-39757
Taskbot <= 6.6 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-39758
Midtrans-WooCommerce <= 2.32.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-39720
Mapster WP Maps <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-39783
Polylang <= 3.8.7 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-103684
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Missing Authorization
Medium
CVE-2026-104385
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.8.3 - Unauthenticated Information Exposure
Medium
CVE-2026-102387
XServer Migrator <= 1.6.6 - Unauthenticated Information Exposure
Medium
CVE-2026-105073
Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.25 - Unauthenticated Information Exposure
High
CVE-2026-95594
SMS Alert – SMS Notifications & OTP Login, COD Verification, Abandoned Cart Recovery <= 4.0.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-104399
Motors – Car Dealership & Classified Listings Plugin <= 1.4.124 - Unauthenticated Information Exposure
High
CVE-2026-104394
Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) <= 1.8.12.3 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104672
GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104395
picu – Online Photo Proofing Gallery <= 3.10.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-104406
picu – Online Photo Proofing Gallery <= 3.10.1 - Missing Authorization
High
CVE-2026-104405
GiveWP – Donation Plugin and Fundraising Platform <= 4.17.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-105317
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.1.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-105058
WP User Profiles <= 2.7.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-104387
PowerPress Podcasting plugin by Blubrry <= 11.17.9 - Missing Authorization
Medium
CVE-2026-39763
WP Dummy Content Generator <= 4.0.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.