Medium
CVE-2026-49044
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-48877
GenerateBlocks <= 2.1.0 - Authenticated (Contributor+) Information Disclosure
High
CVE-2025-69163
WineShop - Food & Wine Store WordPress Theme <= 3.17 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49052
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 3.9.6 - Missing Authorization
Medium
CVE-2026-49045
Adminimize <= 1.11.11 - Missing Authorization
High
CVE-2025-69175
Line Agency <= 1.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-7850
Magnific Popup <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2025-69164
Skyward <= 1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-69178
Truemag <= 4.3.14.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69159
Printo <= 1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69158
Granola <= 1.13 - Unauthenticated Local File Inclusion
High
CVE-2025-69168
Spike <= 1.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49059
Meta for WooCommerce <= 3.7.0 - Unauthenticated Open Redirect
High
CVE-2025-69174
Etude <= 1.6 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49054
The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid <= 7.9.2 - Missing Authorization
High
CVE-2026-48972
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-3173
Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure
High
CVE-2026-42738
Smart Online Order for Clover <= 1.6.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-6226
Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection
Medium
CVE-2026-48968
Master Slider – Responsive Touch Slider <= 3.10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-7651
User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter
Medium
CVE-2026-48973
SVG Support <= 2.5.14 - Missing Authorization
High
CVE-2026-44177
Kirby CMS has pre-authentication path traversal and PHP file inclusion during user lookup
Medium
CVE-2026-44176
Kirby CMS's `pages.access` permission is not checked during rendering of page drafts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.