Mittel
CVE-2026-86809
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 2.089
Filter zurücksetzen
Mittel
CVE-2026-86813
MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor < 4.1.9 - Unauthenticated Email Header Injection
Mittel
CVE-2026-13709
Graphina <= 3.1.11 - Authenticated (Author+) Stored Cross-Site Scripting via 'iq_tree_tree_chart_template' Widget Setting
Hoch
CVE-2026-84820
Unlimited Elements For Elementor <= 2.0.17 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-84935
HT Menu – WordPress Mega Menu Builder for Elementor < 1.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Mittel
CVE-2026-84896
King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder < 51.1.77 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2026-75586
Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
Mittel
CVE-2026-17517
Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) < 4.5.1.2 - Missing Authorization
Mittel
CVE-2026-85302
WPKoi Templates for Elementor <= 3.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2026-85304
Unlimited Elements For Elementor <= 2.0.17 - Missing Authorization
Hoch
CVE-2026-84763
RTMKit <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-84752
RTMKit <= 2.1.5 - Authenticated (Contributor+) PHP Object Injection
Mittel
CVE-2026-84146
Xpro Addons — 140+ Widgets for Elementor < 1.7.8 - Unauthenticated Information Exposure
Mittel
CVE-2026-83547
Xpro Elementor Addons <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2026-75921
Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction
Hoch
CVE-2026-17565
Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates < 2.7.2 - Unauthenticated Server-Side Request Forgery
Mittel
CVE-2026-81777
Essential Addons for Elementor – Popular Elementor Templates & Widgets <= 6.8.0 - Unauthenticated Captcha Bypass
Mittel
CVE-2026-19226
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2026-13406
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Missing Authorization
Hoch
CVE-2026-75971
ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes
Mittel
CVE-2026-18100
MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting
Mittel
CVE-2026-27364
Style Kits for Elementor <= 2.6.5 - Missing Authorization
Mittel
CVE-2026-13404
Royal Addons for Elementor – Addons and Templates Kit for Elementor < 1.7.1066 - Unauthenticated Like Count Manipulation
Kritisch
CVE-2026-32477
ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 - Unauthenticated Arbitrary File Deletion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.