Hoch
CVE-2026-62099
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.498
Filter zurücksetzen
Hoch
CVE-2026-62096
Biolife - Organic Food WordPress Theme ( RTL Supported ) <= 3.2.3 - Unauthenticated Local File Inclusion
Hoch
CVE-2026-42777
Aalto - Architecture and Interior Design WordPress Theme <= 1.8 - Unauthenticated Local File Inclusion
Hoch
CVE-2026-89417
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feed
Kritisch
CVE-2026-42696
SiteVault – Backup, Restore, Migration & Cloning <= 1.5.18 - Unauthenticated Remote Code Execution
Kritisch
CVE-2026-39802
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.13 - Unauthenticated Remote Code Execution
Hoch
CVE-2026-105701
ACPT (Premium) <= 2.0.66 - Authenticated (Subscriber+) Remote Code Execution via REST API Email Template
Hoch
CVE-2026-39776
Tabs Responsive – With WooCommerce Product Tabs Extension <= 2.5 - Authenticated (Editor+) Remote Code Execution
Kritisch
CVE-2026-39770
Doctreat - Hospitals and Doctors Directory WordPress Listing Theme <= 1.7.0 - Unauthenticated Arbitrary File Upload
Hoch
CVE-2026-39725
Content Visibility for Divi Builder <= 5.03 - Authenticated (Contributor+) Remote Code Execution
Hoch
CVE-2026-39728
Instapage Plugin <= 3.7.2 - Unauthenticated Server-Side Request Forgery
Mittel
CVE-2026-39754
Piotnet Addons For Elementor <= 7.1.71 - Authenticated (Contributor+) Arbitrary File Read
Hoch
CVE-2026-39755
WP Duplicate – WordPress Migration Plugin <= 1.1.11 - Authenticated (Subscriber+) Arbitrary File Upload
Hoch
CVE-2026-39757
Taskbot <= 6.6 - Authenticated (Subscriber+) Arbitrary File Upload
Mittel
CVE-2026-102387
XServer Migrator <= 1.6.6 - Unauthenticated Information Exposure
Mittel
CVE-2026-82212
Nexi XPay Build 7.2.2 - 7.6.2 - Unauthenticated Payment Bypass
Hoch
CVE-2026-39759
Workreap Core <= 3.4.5 - Authenticated (Employer / Sales Representative+) Arbitrary File Upload
Hoch
CVE-2026-104677
Coder 4.0 - 4.5.1 - Authenticated (Editor+) Remote Code Execution
Kritisch
CVE-2026-39792
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Deletion
Mittel
CVE-2026-97354
PowerPress 11.13.12 - 11.17.9 - Authenticated (Contributor+) Server-Side Request Forgery
Mittel
CVE-2026-105322
Magee Shortcodes <= 2.1.1 - Unauthenticated Mail Relay
Mittel
CVE-2026-104401
Memberful – Membership Plugin <= 1.81.2 - Authenticated (Contributor+) Protected Post Content Disclosure
Hoch
CVE-2026-39752
Job Postings <= 2.8.2 - Authenticated (Contributor+) Arbitrary File Deletion
Hoch
CVE-2026-32568
WooCommerce Designer Pro <= 1.9.33 - Authenticated (Subscriber+) Remote Code Execution
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.