Mittel
CVE-2026-11988
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.534
Mittel
CVE-2026-12127
WPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Name
Mittel
CVE-2026-11380
JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting
Hoch
CVE-2026-49451
Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
Mittel
CVE-2026-2387
Event Organiser <= 3.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via eo_events Shortcode
Hoch
CVE-2026-7517
Custom Payment Gateways for WooCommerce <= 2.1.0 - Unauthenticated Stored Cross-Site Scripting via 'alg_wc_cpg_input_fields' Parameter
Mittel
CVE-2026-12110
Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter
Mittel
CVE-2026-12090
Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'wppm_proj_filter' Parameter
Mittel
CVE-2026-12135
FV Flowplayer Video Player <= 7.5.51.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'video_player' Shortcode
Hoch
CVE-2026-13731
WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
Mittel
CVE-2026-13015
WP Google Review Slider <= 18.1 - Reflected Cross-Site Scripting via 'place' Parameter
Hoch
CVE-2026-13468
Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint
Mittel
CVE-2026-9107
Kali Forms <= 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'kaliforms_field_components' Parameter
Hoch
CVE-2026-12923
Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
Mittel
CVE-2026-13443
Tutor LMS <= 3.9.13 - Authenticated (Author+) Stored Cross-Site Scripting via Lesson Attachment Title
Mittel
CVE-2026-12904
Kadence Blocks <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Optimizer Data Deletion/Read/Modification via 'post_path' Parameter
Mittel
CVE-2026-13246
GiveWP <= 4.16.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'block_id' Shortcode Attribute
Mittel
CVE-2026-12133
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action
Hoch
CVE-2026-10513
Webmention <= 5.8.0 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author Properties
Mittel
CVE-2026-27433
Motors - Car Dealer, Rental & Listing WordPress theme <= 5.6.80 - Missing Authorization
Mittel
CVE-2026-27408
NativeChurch <= 4.8.8.2 - Reflected Cross-Site Scripting
Hoch
CVE-2026-13693
Bit Form <= 3.0.0 - Unauthenticated Arbitrary File Read
Hoch
CVE-2026-27402
Kids Life | Children School WordPress <= 5.2 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-57675
WP Photo Album Plus <= 9.2.02.004 - Unauthenticated Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.