High
CVE-2026-8172
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Critical
CVE-2026-12492
Happy Coders OTP Login for WooCommerce <= 2.7 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2026-10531
AI Share & Summarize < 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-57700
OMGF Pro <= 5.2.6 - Unauthenticated Arbitrary File Upload via @import URL Reflection
Medium
CVE-2026-56069
Toolset Forms <= 2.6.24 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-8378
Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-12525
Redux Framework <= 4.5.12 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-11361
Formidable Forms <= 6.32.0 - Unauthenticated Payment Bypass
High
CVE-2026-56055
RH - Real Estate WordPress Theme <= 4.5.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-12907
RTMKit Addons for Elementor <= 2.0.8 - Missing Authorization
Medium
CVE-2026-57429
Slim SEO – A Fast & Automated SEO Plugin For WordPress <= 4.6.2 - Missing Authorization
Medium
CVE-2026-56061
Subscriptions for WooCommerce <= 1.9.5 - Missing Authorization
High
CVE-2026-57319
FOX – Currency Switcher Professional for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-12510
AI Engine <= 3.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Chatbot Discussion Disclosure
Medium
CVE-2026-8163
Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-56047
Perfmatters <= 2.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-57618
Neve PRO <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-12869
Header Footer Builder for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-56063
Block for Mailchimp – Add Email Subscription Forms and Collect Leads <= 1.1.15 - Missing Authorization
Medium
CVE-2026-12979
FunnelKit <= 3.15.0.5 - Authenticated (Admin+) Arbitrary File Deletion
High
CVE-2026-11371
BetterDocs <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-56068
JetEngine <= 3.8.10.2 - Unauthenticated SQL Injection
High
CVE-2026-56045
WordPress Automatic Plugin < 3.135.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-12906
RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.