Mittel
CVE-2026-14322
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.534
Hoch
CVE-2026-57360
eCommerce Product Catalog Plugin for WordPress <= 3.5.4 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-57351
HandL UTM Grabber / Tracker <= 2.9.2 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-57355
Classified Listing – AI-Powered Classified ads & Business Directory <= 5.4.2 - Missing Authorization
Hoch
CVE-2026-57426
Modula - PRO <= 2.10.8 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-57352
ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 - Missing Authorization
Hoch
CVE-2026-57359
ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema <= 2.3.10 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-57356
MoreConvert Wishlist for WooCommerce <= 1.9.19 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-57722
Enable Media Replace <= 4.2.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Mittel
CVE-2026-57721
ApplyOnline – Application Form Builder and Manager <= 2.6.7.6 - Missing Authorization
Mittel
CVE-2026-5348
Academy LMS <= 3.8.1 - Unauthenticated Insecure Direct Object Reference to Private Topic Disclosure
Hoch
CVE-2026-12968
Product Addons – WowAddons <= 1.6.14 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-27409
Advanced Booking & Appointment System – Webba Booking Calendar <= 6.4.13 - Missing Authorization
Mittel
CVE-2026-57720
ThumbPress – Compress Images, Manage Thumbnails, Detect Image Issues, WebP/AVIF, Lazy Loading, Hotlinking & More <= 6.3.2 - Missing Authorization
Mittel
CVE-2026-57731
Flatsome <= 3.20.5 - Missing Authorization
Mittel
CVE-2026-57347
MotoPress Hotel Booking <= 6.0.3 - Authenticated (Subscriber+) Information Exposure
Mittel
CVE-2026-57348
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.4 - Unauthenticated Server-Side Request Forgery
Kritisch
CVE-2026-5524
Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter
Hoch
CVE-2026-57350
WP Debugging <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-57737
Shortcodes and extra features for Phlox theme <= 2.17.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2026-57366
WPAdverts – Classifieds Plugin <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-57361
Survey Maker by AYS <= 5.2.2.5 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-57357
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization <= 2.6.6 - Reflected Cross-Site Scripting
Mittel
CVE-2026-57358
SysBasics Customize My Account for WooCommerce – Live My Account Customizer <= 4.3.9 - Reflected Cross-Site Scripting
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.