CMS / Site Builder

🛡 Related vulnerabilities 76

Image	ID	Title	Severity	Detected
	CVE-2026-105436	Unsafe Deserialization in MainWP Child (CVE-2026-105436)	High	1 week ago
	CVE-2026-18443	The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is...	High	2 weeks ago
	CVE-2026-97644	The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to...	High	2 weeks ago
	CVE-2026-92536	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...	High	2 weeks ago
	CVE-2026-39718	Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross...	High	2 weeks ago
	CVE-2026-16601	The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is...	High	1 month ago
	CVE-2026-18323	The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...	High	1 month ago
	CVE-2026-18328	The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...	High	1 month ago
	CVE-2026-72695	Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion	High	1 month ago
	CVE-2026-72696	Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job:...	High	1 month ago
	CVE-2026-56707	Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass...	High	1 month ago
	CVE-2026-14279	The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to...	High	2 months ago
	CVE-2026-73680	Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration...	High	2 months ago
	CVE-2026-19794	The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up...	High	2 months ago
	CVE-2026-19758	A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some...	High	2 months ago
	CVE-2026-18146	The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin...	High	2 months ago
	CVE-2026-15426	The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress...	High	2 months ago
	CVE-2026-18325	The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is...	High	2 months ago
	CVE-2026-16636	The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP...	High	2 months ago
	CVE-2026-15991	The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible...	High	2 months ago
	CVE-2026-71291	Bolt CMS renders content field values through Twig's full application-level Environment with no...	High	2 months ago
	CVE-2026-7444	The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in...	High	2 months ago
	CVE-2026-7520	The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification...	High	2 months ago
	CVE-2026-6627	The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to...	High	2 months ago
	CVE-2026-6147	The LightSync Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing...	High	2 months ago
	CVE-2026-65443	Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.	High	2 months ago
	CVE-2026-66473	Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.	High	2 months ago
	CVE-2026-65447	Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.	High	2 months ago
	CVE-2026-65441	Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.	High	2 months ago
	CVE-2026-65446	Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.	High	2 months ago