High
CVE-2026-47110
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,529
Medium
CVE-2026-56060
Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 - Unauthenticated Information Exposure
Medium
CVE-2026-57312
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-57619
Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-56064
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-56062
Quotes llama <= 3.1.5 - Unauthenticated SQL Injection
Medium
CVE-2026-10599
Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass
High
CVE-2026-57658
TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder <= 4.2.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-57622
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System <= 3.0.14 - Missing Authorization
Medium
CVE-2026-56066
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.11.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-12978
FunnelKit <= 3.15.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-9710
Cornerstone < 7.8.8 - Missing Authorization
Medium
CVE-2026-56051
TablePress – Tables in WordPress made easy <= 3.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-57430
SEOPress PRO <= 9.1.1 - Missing Authorization
Medium
CVE-2026-11866
LatePoint <= 5.6.2 - Cross-Site Request Forgery
Medium
CVE-2026-8379
Frontend File Manager Plugin <= 23.6 - Missing Authorization to Unauthenticated File Download
High
CVE-2026-56057
Uncanny Automator Pro <= 7.3.0.6 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2026-12585
Abandoned Cart Lite for WooCommerce <= 6.8.1 - Unauthenticated Privilege Escalation via Weak Recovery Link
Medium
CVE-2026-12395
Job Portal <= 2.5.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24547
SiteGround Email Marketing <= 1.7.5 - Missing Authorization
Low
CVE-2026-10753
Site Kit by Google – Analytics, Search Console, AdSense, Speed < 1.176.0 - Missing Authorization to Authenticated (Editor+) Settings Update
High
CVE-2026-56053
EventPrime – Events Calendar, Bookings and Tickets <= 4.3.4.1 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-56050
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.18 - Missing Authorization
Medium
CVE-2026-57617
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.