Medium
CVE-2026-97240
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
CVE-2026-96349
SiteSkite – Secure MCP & AI WebOps. Connect ChatGPT, Claude, or Any AI Agent via MCP <= 2.1.8 - Unauthenticated Remote Code Execution
Medium
CVE-2026-97244
Creator LMS – WordPress LMS Plugin for Coaches, Cohorts & Course Creators <= 1.2.19 - Authenticated (Contributor+) Path Traversal
Medium
CVE-2026-97239
MCP Content Manager Lite <= 1.1.0 - Missing Authorization
Medium
CVE-2026-93624
Music Player for WooCommerce <= 1.9.1 - Authenticated (Shop Manager+) PHP Object Injection
High
CVE-2026-95531
WPBot – ChatBot Conversational Forms <= 1.5.0 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-94499
FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More <= 1.12.2 - Missing Authorization
High
CVE-2026-93512
JW Player for WordPress <= 2.3.11 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97250
Geo Mashup <= 1.13.21 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-96818
WP Express Checkout (Fast Payments via PayPal & Stripe) <= 2.4.9 - Missing Authorization
Medium
CVE-2026-94122
Responsive Slider Gallery – Responsive Image Photo Slider <= 1.5.5 - Authenticated (Editor+) PHP Object Injection
High
CVE-2026-96822
Books Gallery – Book Showcase, Library & Affiliate Plugin <= 4.8.3 - Unauthenticated SQL Injection
Medium
CVE-2026-96819
oik <= 4.15.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-13718
Tabs Responsive <= 2.5 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Medium
CVE-2026-96200
Payments for Hubtel <= 1.0.1 - Missing Authorization
Medium
CVE-2026-96450
Pixfort Core < 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-101147
Featured Image from URL (FIFU) Free & Premium <= 6.0.7 - Cross-Site Request Forgery
High
CVE-2026-89296
Pro Like Button <= 1.0 - Unauthenticated SQL Injection
High
CVE-2026-81739
Paytm Payment Gateway <= 2.8.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-97242
WEBO MCP <= 3.0.18 - Authenticated (Author+) Arbitrary File Deletion
Medium
CVE-2026-90972
Fusion Lite <= 3.47.0 - Missing Authorization
Medium
CVE-2026-81740
Paytm Payment Gateway <= 2.8.8 - Unauthenticated Payment Bypass
High
CVE-2026-81809
Paytm Payment Gateway <= 2.8.8 - Unauthenticated SQL Injection
Medium
CVE-2026-87970
If-So Dynamic Content 1.8 - 1.10.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.