Mittel
CVE-2026-16535
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.445
Mittel
CVE-2026-16041
MStore API <= 4.20.0 - Missing Authorization
Hoch
CVE-2026-18465
Maps Pro <= 6.1.2 - Unauthenticated Local File Inclusion
Mittel
CVE-2026-16590
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Contact Message and User Data Disclosure
Mittel
CVE-2026-14205
Events Manager <= 2.2.4 - Authenticated (Subscriber+) Payment Bypass
Mittel
CVE-2026-16589
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) SQL Injection
Mittel
CVE-2026-16262
Estatik <= 4.3.2 - Cross-Site Request Forgery
Mittel
CVE-2026-16559
YMC Filter <= 3.12.8 - Authenticated (Author+) Stored Cross-Site Scripting
Hoch
CVE-2026-28143
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.56.0 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-16039
MStore API <= 4.20.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Order and Customer PII Disclosure
Mittel
CVE-2026-28147
Unlimited Elements For Elementor <= 2.0.15 - Missing Authorization
Mittel
CVE-2025-15678
Nexter Blocks <= 5.0.1 - Authenticated (Author+) Stored Cross-Site Scripting
Mittel
CVE-2026-16988
GeoDirectory <= 2.8.168 - Unauthenticated Pending/Draft Listing Disclosure
Mittel
CVE-2026-13703
SEO Redirection Plugin – 301 Redirect Manager <= 9.18 - Authenticated (Subscriber+) Information Exposure
Mittel
CVE-2026-16578
Admin Safety Guard <= 1.3.0 - Unauthenticated User Data Disclosure
Mittel
CVE-2026-16595
Directory Kit <= 1.5.4 - Information Exposure to Authenticated (Subscriber+) User and Unpublished Listing Disclosure
Mittel
CVE-2026-15214
Subscriptions for WooCommerce <= 2.0.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Subscription Detail Disclosure
Hoch
CVE-2026-18464
Maps Pro <= 6.1.2 - Unauthenticated Denial of Service
Mittel
CVE-2026-18037
Create by Mediavine <= 2.5.3 - Unauthenticated Information Exposure
Mittel
CVE-2026-16992
Create by Mediavine <= 2.5.3 - Unauthenticated Information Exposure
Hoch
CVE-2026-12713
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL Injection
Mittel
CVE-2026-16574
Dokan <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Downloadable Product Access Grant
Mittel
CVE-2026-16594
Directory Kit <= 1.5.4 - Authenticated (Subscriber+) Plugin Settings and API Key Disclosure
Mittel
CVE-2026-16957
Slim SEO <= 4.9.10 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Meta Disclosure
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.