Medium
CVE-2026-103338
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
Medium
CVE-2026-103067
Memberful – Membership Plugin <= 1.81.0 - Cross-Site Request Forgery
High
CVE-2026-97260
MaxGalleria <= 6.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-100514
REST API Log <= 1.7.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-97269
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-102378
Parallax Section Block – Add Parallax Scrolling Effects to Sections <= 2.0.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97273
Premmerce Wishlist for WooCommerce <= 1.1.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-62073
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions <= 8.5.6 - Missing Authorization
Medium
CVE-2026-97280
SchemaEngine AI – AI Schema Markup, Reviews & Rich Snippets for SEO 3.1.0 - Missing Authorization
Medium
CVE-2026-94390
Hide Shipping Method For WooCommerce <= 1.5.4 - Authenticated (Editor+) PHP Object Injection
High
CVE-2026-97284
Icegram Engage – Popups, Optins, CTAs & Lead Generation <= 3.1.31 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-103336
WP Ultimate CSV Importer – WordPress CSV, XML & Excel Import Export <= 9.1 - Unauthenticated Information Exposure
High
CVE-2026-62071
Iptanus File Upload <= 5.1.10 - Unauthenticated SQL Injection
Medium
CVE-2026-100517
Photo Reviews for WooCommerce <= 1.2.30 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-103353
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Missing Authorization
Medium
CVE-2026-103082
LA-Studio Element Kit for Elementor <= 1.6.2 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-91078
TillKit <= 1.0.4 - Unauthenticated Privileged POS Session Hijacking
High
CVE-2026-103347
hCaptcha for WP <= 5.3.0 - Unauthenticated Captcha Verification Bypass
Medium
CVE-2026-101161
Ultimate Review <= 2.4.3 - Unauthenticated Persistent Page Denial of Service
Medium
CVE-2026-88782
Kubio AI Page Builder <= 2.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-101159
Ultimate Review <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-92437
Mailchimp for WooCommerce <= 6.2 - Missing Authorization
Medium
CVE-2026-101160
Ultimate Review <= 2.4.3 - Unauthenticated Persistent Denial of Service
Medium
CVE-2026-80517
Ultimate CSV Importer 7.17 - 9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.