Medium
CVE-2026-48199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
High
CVE-2026-94664
PDF for Contact Form 7 + Drag and Drop Template Builder <= 7.1.0 - Unauthenticated Arbitrary File Read
Medium
CVE-2026-94663
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-96332
Simple Payment <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-94666
Generate PDF using Contact Form 7 <= 4.2.1 - Unauthenticated Arbitrary File Read
High
CVE-2026-94668
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-104747
Haaken <= 1.5 - Unauthenticated PHP Object Injection
Medium
CVE-2026-94667
JetReviews <= 3.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-32580
WooCommerce Lottery <= 2.2.9 - Unauthenticated SQL Injection
Medium
CVE-2026-94161
Grand Restaurant WordPress < 7.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2026-96607
NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-32557
WooCommerce Appointments <= 5.3.2 - Unauthenticated SQL Injection
Medium
CVE-2026-96334
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.7 - Missing Authorization
High
CVE-2026-94167
Kubio AI Page Builder <= 2.9.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-95589
Advanced Partial Payment or Deposit for WooCommerce <= 4.0.1 - Missing Authorization
High
CVE-2026-94170
Social Sharing Plugin – Sassy Social Share <= 3.3.79 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-94665
Classified Listing – AI-Powered Classified ads & Business Directory <= 6.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2026-94503
Zombify <= 1.7.7 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-32570
Progressify - Progressive Web App (PWA) <= 1.6.0 - Unauthenticated Cross-Site Scripting
High
CVE-2026-32569
WP Media folder <= 6.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-103066
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-100511
VK Google Job Posting Manager <= 1.3.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-100506
WP Spell Check <= 12.1 - Authenticated (Author+) PHP Object Injection
High
CVE-2026-97257
Simple Event Planner <= 1.5.7 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.