Medium
CVE-2026-8378
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-12525
Redux Framework <= 4.5.12 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-11361
Formidable Forms <= 6.32.0 - Unauthenticated Payment Bypass
High
CVE-2026-56055
RH - Real Estate WordPress Theme <= 4.5.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-12907
RTMKit Addons for Elementor <= 2.0.8 - Missing Authorization
Medium
CVE-2026-57429
Slim SEO – A Fast & Automated SEO Plugin For WordPress <= 4.6.2 - Missing Authorization
Medium
CVE-2026-56061
Subscriptions for WooCommerce <= 1.9.5 - Missing Authorization
High
CVE-2026-57319
FOX – Currency Switcher Professional for WooCommerce <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-12510
AI Engine <= 3.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Chatbot Discussion Disclosure
Medium
CVE-2026-8163
Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-56047
Perfmatters <= 2.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-57618
Neve PRO <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-12869
Header Footer Builder for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-56063
Block for Mailchimp – Add Email Subscription Forms and Collect Leads <= 1.1.15 - Missing Authorization
Medium
CVE-2026-12979
FunnelKit <= 3.15.0.5 - Authenticated (Admin+) Arbitrary File Deletion
High
CVE-2026-11371
BetterDocs <= 4.5.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-56068
JetEngine <= 3.8.10.2 - Unauthenticated SQL Injection
High
CVE-2026-56045
WordPress Automatic Plugin < 3.135.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-12906
RTMKit Addons for Elementor <= 2.0.8 - Authenticated (Contributor+) Information Exposure
High
CVE-2026-11998
Angular's deprecated package has a Cross-Site Scripting issue
Unrated
CVE-2026-13243
drupal/salesforce - SA-CONTRIB-2026-063
Unrated
CVE-2026-13242
drupal/geolocation - SA-CONTRIB-2026-062
Unrated
CVE-2026-13241
drupal/paragraphs - SA-CONTRIB-2026-061
Unrated
CVE-2026-13240
drupal/paragraphs - SA-CONTRIB-2026-060
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.