Medium
CVE-2026-25397
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-32485
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization
Medium
CVE-2026-39500
themesflat-addons-for-elementor <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-25034
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.16 - Missing Authorization
High
CVE-2026-32506
Archicon < 1.7 - Unauthenticated PHP Object Injection
High
CVE-2026-32544
OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.62 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-25376
Addon Jobsearch Chat <= 3.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-25355
Sanzo < 2.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-25358
Meloo < 2.8.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-32508
Halstein < 1.8 - Unauthenticated PHP Object Injection
Medium
CVE-2026-25342
Boutique < 2.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2026-25383
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.16 - Reflected Cross-Site Scripting
High
CVE-2026-32511
Stål < 1.7 - Unauthenticated PHP Object Injection
High
CVE-2026-23971
Woodmart <= 8.3.8 - Unauthenticated PHP Object Injection
Medium
CVE-2026-32535
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-39566
DirectoryPress <= 3.6.26 - Unauthenticated Information Exposure
Medium
CVE-2026-23977
Helpdesk Support Ticket System for WooCommerce <= 2.1.2 - Missing Authorization
Medium
CVE-2026-24369
The Grid < 2.8.0 - Missing Authorization
High
CVE-2026-32502
Borgholm < 1.6 - Unauthenticated PHP Object Injection
Medium
CVE-2026-32493
JobSearch WP Job Board <= 3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-32490
WP TripAdvisor Review Slider <= 14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-25031
Tasty Daily < 1.27 - Unauthenticated PHP Object Injection
Medium
CVE-2026-25396
Coinbase Commerce – Crypto Gateway for WooCommerce <= 1.6.6 - Missing Authorization
Medium
CVE-2026-2688
CM HIPAA Forms <= 3.1.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.