Mittel
CVE-2026-2383
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Mittel
CVE-2025-14149
Xpro Addons — 140+ Widgets for Elementor <= 1.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Scroller Widget box link
Mittel
CVE-2025-14040
Automotive Car Dealership Business WordPress Theme <= 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action Fields
Kritisch
CVE-2025-12981
Listee <= 1.1.6 - Unauthenticated Privilege Escalation
Mittel
CVE-2026-1558
WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter
Mittel
CVE-2026-56357
n8n: Webhook Forgery on Github Webhook Trigger
Mittel
CVE-2026-56351
n8n: SQL Injection in MySQL, PostgreSQL, and Microsoft SQL nodes
Hoch
CVE-2026-27818
TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist
Hoch
CVE-2026-27148
Storybook Dev Server is Vulnerable to WebSocket Hijacking
Hoch
CVE-2026-2428
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification
Hoch
CVE-2026-1565
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload
Hoch
CVE-2026-27961
Agenta is an open-source LLMOps platform. A Server-Side Template Injection (SSTI) vulnerability exists in versions prior to 0.86.8 in Agenta's API server evaluator template rendering. Although the vul
Kritisch
CVE-2026-27941
OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out a
Mittel
CVE-2026-27948
Copyparty vulnerable to reflected XSS via setck parameter
Kritisch
CVE-2026-27952
Agenta is an open-source LLMOps platform. In Agenta-API prior to version 0.48.1, a Python sandbox escape vulnerability existed in Agenta's custom code evaluator. Agenta used RestrictedPython as a sand
Mittel
CVE-2026-27809
psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps
Mittel
CVE-2026-28126
RH Frontend Publishing Pro < 4.3.4 - Reflected Cross-Site Scripting
Mittel
e5b98a2c-faed-4e2b-8b94-31e2be95ad40
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.4 - Unauthenticated Reflected Cross-Site Scripting via 'title_tag' Parameter
Hoch
CVE-2026-28123
Veil - Wedding & Photographer WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Mittel
CVE-2026-28113
Ultimate Learning Pro <= 3.9.1 - Reflected Cross-Site Scripting
Hoch
CVE-2026-28121
Anderson <= 1.4.2 - Unauthenticated Local File Inclusion
Mittel
CVE-2026-32418
Meow Gallery <= 5.4.4 - Authenticated (Author+) SQL Injection
Mittel
CVE-2026-39694
Simply Schedule Appointments <= 1.6.11.0 - Missing Authorization
Hoch
CVE-2026-28114
WooCommerce License Manager <= 7.0.6 - Authenticated (Shop Manager+) Arbitrary File Upload
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.