Medium
CVE-2026-39650
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-32360
Rich Showcase for Google Reviews <= 6.9.4.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2026-39651
Total Poll Lite <= 4.12.0 - Missing Authorization
High
CVE-2026-39647
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.11 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-39646
Leaflet Map <= 3.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32362
Sessions Time Monitoring Full Automatic <= 1.1.3 - Missing Authorization
High
CVE-2026-39645
GlobalPayments WooCommerce <= 1.18.3 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-25362
FooGallery <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-39649
Royale News <= 2.2.4 - Missing Authorization
Medium
CVE-2026-39648
Cream Blog <= 2.1.7 - Missing Authorization
Medium
CVE-2026-39653
Video Conferencing with Zoom <= 4.6.6 - Missing Authorization
Medium
CVE-2026-32361
Editorial Calendar <= 3.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39541
Hydra Booking <= 1.1.38 - Authenticated (Hydra host+) Stored Cross-Site Scripting
Medium
CVE-2026-25363
FooGallery <= 3.1.11 - Missing Authorization
Medium
061a14bf-d067-4924-b2f4-2f5986204532
SureForms <= 2.2.1 - Missing Authorization
Medium
CVE-2026-39652
iGMS Direct Booking <= 1.3 - Missing Authorization
Medium
CVE-2026-32363
WPLifeCycle <= 3.3.1 - Missing Authorization
Medium
CVE-2026-1793
Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2026-1750
Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access
Critical
CVE-2026-1490
Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation
Medium
CVE-2026-2469
ImapEngine affected by command injection via the ID command parameters
Medium
CVE-2026-39639
RPS Include Content <= 1.2.2 - Missing Authorization
High
CVE-2026-32355
JetEngine < 3.8.4.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-32358
Booking Calendar <= 10.14.15 - Authenticated (Editor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.