Mittel
CVE-2026-57637
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.533
Mittel
CVE-2026-57642
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.8 - Authenticated (Contributor+) SQL Injection
Mittel
CVE-2026-57646
Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin <= 1.1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Mittel
CVE-2025-68052
Eagle Booking <= 1.3.4.3 - Cross-Site Request Forgery
Mittel
CVE-2026-57659
Paid Memberships Pro - Add Member From Admin <= 0.7.2 - Cross-Site Request Forgery
Mittel
CVE-2026-57634
PPWP – Password Protect Pages <= 1.9.19 - Authenticated (Contributor+) Insecure Direct Object Reference
Mittel
CVE-2026-57648
Nelio Content – Editorial Calendar & Social Media Auto-Posting <= 4.3.4 - Missing Authorization
Hoch
CVE-2025-68063
Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 - Authenticated (Contributor+) Local File Inclusion
Mittel
CVE-2025-66123
BookPro - Appointment Booking WordPress Plugin <= 1.1.0 - Unauthenticated Insecure Direct Object Reference
Mittel
CVE-2026-3462
Frisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification
Mittel
CVE-2026-57323
HTML5 Video Player – Embed and Play Videos in Custom Player <= 2.11.0 - Missing Authorization
Mittel
CVE-2026-57661
WPComplete <= 2.9.5.5 - Missing Authorization
Mittel
CVE-2026-57635
FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 - Cross-Site Request Forgery
Mittel
CVE-2026-57638
Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2026-57660
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.1 - Missing Authorization
Mittel
CVE-2026-57656
Hester Core <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting
Hoch
CVE-2026-57321
Interactive Content – H5P <= 1.17.7 - Authenticated (Contributor+) Arbitrary File Deletion
Hoch
CVE-2025-68064
Goya Core < 1.0.9.4 - Authenticated (Contributor+) Local File Inclusion
Hoch
CVE-2026-57325
NanoMag <= 1.8 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-57322
weMail – Email Marketing, Newsletter Builder & Email Automations for WooCommerce <= 2.1.2 - Reflected Cross-Site Scripting
Mittel
CVE-2026-57657
Gmail SMTP <= 1.2.3.19 - Cross-Site Request Forgery
Mittel
CVE-2026-12393
WPS Bookings for WooCommerce <= 3.11.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Booking Order Cancellation
Mittel
CVE-2026-57645
Newsletters <= 4.13 - Missing Authorization
Mittel
CVE-2025-68075
BNE Testimonials <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.