High
CVE-2026-105070
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2026-105061
WP Mailster <= 1.9.0.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104814
Form Block <= 1.8.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104670
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses <= 4.4.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-104757
Import and export users and customers <= 2.5.5 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2026-105071
SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 - Unauthenticated Information Exposure
Medium
CVE-2026-102915
WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) <= 44.1 - Missing Authorization
Medium
CVE-2026-105059
WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments <= 7.1 - Missing Authorization
Medium
CVE-2026-39721
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.7 - Missing Authorization
Medium
CVE-2026-104389
Image Optimizer, Resizer and CDN – Sirv <= 8.2.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-104388
PowerPress Podcasting plugin by Blubrry <= 11.17.9 - Unauthenticated Information Exposure
Medium
CVE-2026-102393
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103079
JS Help Desk – AI-Powered Support & Ticketing System <= 4.0.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-104396
Name Directory <= 1.34.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-104675
Event Tickets and Registration <= 5.30.0 - Missing Authorization
Medium
CVE-2026-102914
Presto Player <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103084
Premium Addons for Elementor – AI-Ready Elementor Addons, Widgets & Templates <= 4.11.109 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-104397
Name Directory <= 1.34.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-105060
Logo Showcase – Logo Slider, Carousel & Sponsors Gallery <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-104673
MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar <= 5.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-105056
eCommerce Product Catalog <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-104408
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.8.3 - Authenticated (Custom Role+) SQL Injection
Medium
CVE-2026-103335
Video Conferencing with Zoom <= 4.6.10 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-105055
WP Mailster <= 1.9.0.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.