Medium
CVE-2026-32529
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-2352
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value
Medium
CVE-2026-3572
iTracker360 <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'itracker_license' Settings Field
Medium
CVE-2026-25356
Yobazar < 1.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2026-32541
Premmerce Redirect Manager <= 1.0.12 - Missing Authorization
High
CVE-2026-32503
Trendustry <= 1.1.4 - Unauthenticated Local File Inclusion
Medium
CVE-2026-25352
MyDecor < 1.5.9 - Reflected Cross-Site Scripting
High
CVE-2026-32512
Pelicula < 1.10 - Unauthenticated PHP Object Injection
Medium
CVE-2026-25390
New User Approve <= 3.2.3 - Missing Authorization
High
CVE-2026-25380
Feedy < 2.1.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32540
Online Scheduling and Appointment Booking System – Bookly <= 26.7 - Reflected Cross-Site Scripting
High
CVE-2026-25371
Lumise Product Designer < 2.0.9 - Unauthenticated SQL Injection
High
CVE-2026-32537
Visual Portfolio, Photo Gallery & Post Grid <= 3.5.1 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2026-25361
Event Booking Manager for WooCommerce <= 5.1.4 - Reflected Cross-Site Scripting
High
CVE-2026-32523
WPJAM Basic <= 6.9.2 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2026-32546
Membership Plugin – Restrict Content <= 3.2.22 - Missing Authorization
Medium
CVE-2026-3577
Keep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title
Medium
CVE-2026-32441
Comments Import & Export <= 2.4.9 - Missing Authorization
High
CVE-2026-32536
Green Downloads <= 2.08 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-32494
Image Slider by Ays- Responsive Slider and Carousel <= 2.7.1 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-32520
RewardsWP – Loyalty Points & Referral Program for WooCommerce <= 1.0.4 - Unauthenticated Privilege Escalation
Low
CVE-2026-3339
Keep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter
High
CVE-2026-33409
Parse Server has an auth provider validation bypass on login via partial authData
Medium
ghsa-5rpf-x9jg-8j5p
Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.