Critical
CVE-2026-58473
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-49114
ONNX: TOCTOU arbitrary file read/write in save_external_dat
High
CVE-2026-9769
Uncontrolled recursion DoS in JustHTML() via deeply nested HTML
High
CVE-2026-45831
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
High
CVE-2026-45830
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
Critical
CVE-2026-45833
ChromaDB has a code injection vulnerability
Medium
CVE-2026-54421
OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties
Critical
CVE-2026-84939
Apache FreeMarker template loading mechanism vulnerable to path traversal
Medium
CVE-2026-62139
Site Kit by Google – Analytics, Search Console, AdSense, Speed <= 1.186.0 - Cross-Site Request Forgery
High
CVE-2026-81090
Gpx2Graphics <= 0.3 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2026-82845
Masteriyo LMS <= 3.4.0 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2026-62133
RTMKit <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2026-62132
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates <= 3.4.0 - Missing Authorization
Medium
CVE-2026-87916
WPBot <= 8.5.9 - Unauthenticated Information Exposure
Critical
CVE-2026-75800
Frontegg SAML SSO <= 1.0.1 - Authentication Bypass to Admin
Medium
CVE-2026-62135
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.24 - Missing Authorization
Medium
CVE-2026-6640
Media Library Assistant <= 3.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_link_attributes Parameter
Medium
CVE-2026-77689
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-77753
Temporary Login Without Password < 1.9.9 - Authenticated (Custom Role+) Persistent Access After Login Revocation
Medium
CVE-2026-62134
Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg <= 4.7.5 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2026-62138
Visual Composer Website Builder <= 45.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-77006
WebTotem Backups < 1.1.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-6642
Media Library Assistant <= 3.35 - Authenticated (Author+) Stored Cross-Site Scripting via Bulk Edit Preset Export/Import
High
CVE-2026-77005
CODE MONKEYS PROPOSALS – Easily create client proposals from your WordPress admin dashboard <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.