Niedrig
ghsa-7q9x-8g6p-3x75
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.593
Hoch
CVE-2026-27496
n8n has In-Process Memory Disclosure in its Task Runner
Hoch
CVE-2026-2931
Amelia Booking 8.3 - 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
Kritisch
CVE-2026-26830
pdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter
Mittel
CVE-2026-4281
FormLift for Infusionsoft Web Forms <= 7.5.21 - Missing Authorization to Unauthenticated Infusionsoft Connection Hijack via OAuth Connection Flow
Mittel
CVE-2026-4331
Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action
Kritisch
ghsa-5mg7-485q-xm76
Two LiteLLM versions published containing credential harvesting malware
Mittel
CVE-2026-4075
BWL Advanced FAQ Manager Lite <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode Attribute
Hoch
CVE-2026-3328
Frontend Admin by DynamiApps <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts
Mittel
CVE-2026-1986
FloristPress for Woo <= 7.8.2 - Reflected Cross-Site Scripting via 'noresults' Parameter
Hoch
CVE-2026-4484
Masteriyo LMS <= 2.1.6 - Missing Authorization to Authenticated (Student+) Privilege Escalation to Administrator
Hoch
CVE-2026-4758
WP Job Portal <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via Resume Custom File Field
Mittel
CVE-2026-4278
Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute
Mittel
CVE-2026-39571
Instantio <= 3.3.30 - Unauthenticated Information Exposure
Mittel
CVE-2026-2389
Complianz – GDPR/CCPA Cookie Consent <= 7.4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Filter
Mittel
CVE-2026-39487
Amelia <= 2.1.1 - Authenticated (Custom role+) SQL Injection
Hoch
CVE-2026-4329
Blackhole for Bad Bots <= 3.8 - Unauthenticated Stored Cross-Site Scripting via User-Agent HTTP Header
Mittel
CVE-2026-4335
ShortPixel Image Optimizer <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title
Mittel
CVE-2026-1032
Conditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update
Mittel
CVE-2026-39486
Download Monitor <= 5.1.8 - Authenticated (Contributor+) SQL Injection
Hoch
CVE-2026-2231
Fluent Booking <= 2.0.01 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters
Hoch
CVE-2026-2511
JS Help Desk – AI-Powered Support & Ticketing System <= 3.0.4 - Unauthenticated SQL Injection via 'multiformid' Parameter
Mittel
CVE-2026-74785
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Mittel
CVE-2026-74786
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.