Medium
CVE-2026-32583
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-32462
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits <= 2.1.3 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-25471
Admin Safety Guard — Login Security & 2FA <= 1.2.9 - Missing Authorization
Low
CVE-2026-25002
LearnPress – Sepay Payment <= 4.0.0 - Missing Authorization
High
CVE-2026-24978
Jobica Core <= 1.4.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-27041
Unlimited Elements for Elementor (Premium) <= 1.4.72 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2026-27047
Curly Core <= 2.1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-27044
TotalPoll for Polls and Contests <= 4.12.0 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-27049
Jobica Core <= 1.4.2 - Missing Authorization
Medium
CVE-2026-32587
WP Easy Pay – Payment and Donation form Builder for Square <= 4.2.11 - Missing Authorization
Medium
CVE-2026-24975
Organici Library <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-24979
Jobica Core <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-27046
StoreCustomizer – A plugin to Customize all WooCommerce Pages <= 2.6.3 - Missing Authorization
Medium
CVE-2026-24980
Visionary Core <= 1.4.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-24973
Support for CitiLights - Real Estate WordPress Theme <= 3.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-27039
WooCommerce Amazon Affiliates - Wordpress Plugin <= 14.0.31 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-24976
Organici Library <= 2.1.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-39496
YayMail <= 4.3.3 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2026-32461
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) <= 9.5.7 - Missing Authorization
Medium
CVE-2026-40740
Tutor LMS <= 3.9.7 - Missing Authorization
Medium
CVE-2026-2233
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter
High
CVE-2026-1947
NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.9 - Missing Authorization to Unauthenticated Arbitrary Form Entry Modification via nf_set_entry_update_id
Medium
CVE-2026-1883
Wicked Folders <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion
Medium
CVE-2026-1870
Thim Kit for Elementor <= 1.3.7 - Missing Authorization to Unauthenticated Private Course Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.