Medium
CVE-2026-74873
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-74872
openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
High
CVE-2026-73360
Chaty Pro <= 3.5.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73367
Easy Google Maps < 1.14.2 - Unauthenticated Arbitrary Remote Script Inclusion
Medium
CVE-2026-15253
Easy Media Replace <= 0.2.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-11565
Advanced File Manager <= 5.4.12 - Missing Authorization
Medium
CVE-2026-16570
NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected Cross-Site Scripting
High
CVE-2026-14334
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13174
Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Speaker Account Deletion
Medium
CVE-2026-13173
Eventin <= 4.1.20 - Missing Authorization
Medium
CVE-2026-32333
Mayosis Core <= 5.4.7 - Reflected Cross-Site Scripting
Medium
CVE-2026-32467
[凹凸曼] 一键采集微信文章 <= 2.0.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2026-14825
Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference
High
CVE-2026-12983
Dinatur <= 1.18 - Unauthenticated SQL Injection
Medium
CVE-2026-28569
SSL Zen — SSL Certificate Installer & HTTPS Redirects <= 4.7.43 - Reflected Cross-Site Scripting
High
CVE-2026-32444
Cwicly <= 1.4.4 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2026-14196
WCFM Marketplace <= 3.8.0 - Insecure Direct Object Reference to Authenticated (Store vendor+) Cross-Vendor Review Deletion and Status Update
Medium
CVE-2026-19055
ProSolution WP Client < 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2026-14861
User Verification <= 2.0.47 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-14287
10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13169
Eventin <= 4.1.20 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Event Modification, Deletion and Ownership Takeover
Medium
CVE-2026-19056
ProSolution WP Client < 2.0.11 - Reflected Cross-Site Scripting
Medium
CVE-2026-13175
Eventin <= 4.1.20 - Insecure Direct Object Reference to Authenticated (Contributor+) Schedule Deletion and Modification
Medium
CVE-2026-18356
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention < 3.3.5 - Unauthenticated Username Denylist Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.