Medium
CVE-2026-2896
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-2894
funadmin exposes sensitive information via getMember function
Low
CVE-2026-2895
funadmin has Weak Password Recovery Mechanism for Forgotten Password
Medium
CVE-2026-39685
The Moneytizer <= 10.0.10 - Missing Authorization
Medium
CVE-2026-32407
WPC Smart Wishlist for WooCommerce <= 5.0.8 - Missing Authorization
Medium
CVE-2026-32406
WPC Product Bundles for WooCommerce <= 8.4.5 - Missing Authorization
Medium
CVE-2026-39686
BSK PDF Manager <= 3.7.2 - Unauthenticated Information Exposure
Medium
CVE-2026-32409
Forminator <= 1.50.2 - Missing Authorization
Medium
CVE-2026-32408
Brizy <= 2.7.23 - Missing Authorization
Medium
CVE-2026-32405
WoodMart <= 8.3.9 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-39509
Directorist <= 8.5.10 - Missing Authorization
Medium
CVE-2026-2385
The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.4.7 - Unauthenticated Email Relay
Medium
CVE-2026-27482
Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown / job deletion)
Medium
CVE-2026-26047
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
High
CVE-2026-26045
Moodle has a Remote Code Execution risk via file restore
Medium
CVE-2026-27199
Werkzeug safe_join() allows Windows special device names
Low
CVE-2026-27205
Flask session does not add `Vary: Cookie` header when accessed in some ways
Medium
CVE-2026-32402
Image Slider by Ays <= 2.7.1 - Missing Authorization
Medium
CVE-2026-32404
Studio99 WP Monitor <= 1.0.3 - Missing Authorization
Medium
CVE-2026-32403
Toocheke Companion <= 1.194 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-39684
OrganicFood <= 3.6.4 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-39679
Freeio <= 1.3.21 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-39682
linkPizza-Manager <= 5.5.5 - Missing Authorization
Medium
CVE-2026-39680
Diet Calorie Calculator <= 1.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.