Medium
CVE-2026-97281
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2026-97277
Social Boost: Giveaways, Instant win and Contests. Grow followers, shares, subscribers, traffic, referrals, sales and more <= 3.6.2 - Missing Authorization
Medium
CVE-2026-97251
Bus Ticket Booking with Seat Reservation <= 5.9.3 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-97258
Aruba Migration Tool <= 1.0.4 - Missing Authorization
High
CVE-2026-97268
Premmerce Wishlist for WooCommerce <= 1.1.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-62058
CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 <= 3.7.2 - Unauthenticated Information Exposure
Medium
CVE-2026-62059
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.13.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2026-62060
Captivate Sync <= 3.3.2 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-62063
Travelly – Tour & Travel Booking Manager for WooCommerce <= 2.3.1 - Missing Authorization
Medium
CVE-2026-62061
ProfileGrid – User Profiles, Groups and Communities <= 6.0.0.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-102394
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103339
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-102379
BuildKit – Product Builder for WooCommerce – Custom PC Builder <= 1.0.28 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-103345
Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.13 - Unauthenticated Information Exposure
Medium
CVE-2026-103063
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-103064
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 4.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-102390
AFFI – Affiliate Marketing for WooCommerce <= 1.0.9 - Missing Authorization
Medium
CVE-2026-102382
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.2.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-102381
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.2.0 - Missing Authorization
Medium
CVE-2026-103343
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-97297
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program <= 4.6.3 - Missing Authorization
Medium
CVE-2026-103341
Unlimited Elements for Elementor <= 2.0.20 - Missing Authorization
Medium
CVE-2026-103340
Site Reviews <= 8.3.2 - Missing Authorization
Medium
CVE-2026-103338
Unlimited Elements for Elementor <= 2.0.20 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.