Hoch
CVE-2026-5478
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 4.498
Filter zurücksetzen
Hoch
CVE-2026-6248
wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
Hoch
CVE-2026-40747
Ecommerce Zone <= 0.9.7 - Authenticated (Subscriber+) Arbitrary File Upload
Hoch
CVE-2026-39590
Atomlab <= 2.4.5 - Unauthenticated Local File Inclusion
Hoch
CVE-2026-40748
Kids Gift Shop <= 0.5.4 - Authenticated (Subscriber+) Arbitrary File Upload
Kritisch
CVE-2026-40746
Restaurant Zone <= 0.7.8 - Authenticated (Subscriber+) Arbitrary File Upload
Mittel
CVE-2026-39489
Download Monitor <= 5.1.9 - Authenticated (Author+) Arbitrary File Download
Hoch
CVE-2026-40750
Kids Online Store <= 0.8.9 - Authenticated (Subscriber+) Arbitrary File Upload
Kritisch
CVE-2026-40749
Charity Zone <= 1.1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Hoch
CVE-2026-39465
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.106.0 - Authenticated (Editor+) Remote Code Execution
Hoch
CVE-2026-39589
Webenvo <= 0.0.6 - Authenticated (Subscriber+) Arbitrary File Upload
Hoch
CVE-2026-6518
CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution
Hoch
CVE-2026-5718
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.7 - Unauthenticated Arbitrary File Upload via Non-ASCII Filename Blacklist Bypass
Hoch
CVE-2026-5710
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.9.6 - Unauthenticated Limited Arbitrary File Read via mfile Field
Hoch
CVE-2026-3464
WP Customer Area <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Read/Deletion via ajax_attach_file
Hoch
CVE-2026-39527
WpStream – Live Streaming, Video on Demand, Pay Per View < 4.11.2 - Authenticated (Subscriber+) Arbitrary File Upload
Mittel
CVE-2026-40724
Client Portal (Pro) <= 5.6.2 - Authenticated (CP Client+) Arbitrary File Download
Hoch
CVE-2026-40731
ChapterOne <= 1.7 - Unauthenticated Local File Inclusion
Hoch
CVE-2026-40727
Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.4 - Authenticated (Sales Representative+) Arbitrary File Deletion
Hoch
CVE-2026-39598
Academy LMS Pro < 3.5.2 - Authenticated (Custom+) Arbitrary File Upload
Hoch
CVE-2025-14868
Career Section <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion
Mittel
CVE-2026-3875
BetterDocs <= 4.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Hoch
CVE-2026-1620
Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
Hoch
CVE-2026-5617
Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.