High
CVE-2016-20075
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2026-54187
JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection
Medium
CVE-2016-20067
Polls CP <= 1.0.8 - Cross-Site Request Forgery
Medium
CVE-2026-54197
GetGenie – AI Content Writer with Keyword Research & SEO Tracking <= 4.4.1 - Unauthenticated Information Exposure
High
CVE-2026-52715
GEO my WP <= 4.5.5 - Unauthenticated SQL Injection
High
CVE-2026-5513
Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie
Medium
CVE-2026-54697
ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing
Medium
CVE-2026-54700
ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation
Medium
CVE-2026-44311
Fabric.js improper escaping in fabric.Gradient colorStops leads to XSS in SVG serialization
Low
ghsa-g7r4-m6w7-qqqr
esbuild allows arbitrary file read when running the development server on Windows
High
CVE-2026-11607
TYPO3 CMS has Broken Access Control in its Form Framework
Medium
CVE-2026-47349
TYPO3 CMS has Broken Access Control in the Recycler Module
Medium
CVE-2026-47347
TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities
High
CVE-2026-47343
TYPO3 CMS: Destructive Actions on File Mount Folders
Medium
CVE-2026-47345
TYPO3 HTML Sanitizer allows Cross-site Scripting
Medium
CVE-2026-1291
Meow Gallery <= 5.4.4 - Missing Authorization to Authenticated (Author+) Shortcode creation
High
CVE-2026-49741
TYPO3 CMS has Privilege Escalation & SQL Injection in its Form Framework
Medium
CVE-2026-47350
TYPO3 CMS has Broken Access Control in its DataHandler
High
CVE-2026-47346
TYPO3 CMS has Broken Access Control in its Form Framework
Medium
CVE-2026-2470
Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'
High
CVE-2026-49742
TYPO3 CMS has Broken Access Control in its Media Module
Medium
CVE-2026-49740
TYPO3 CMS has Insecure Deserialization via Core API
Low
CVE-2026-49738
TYPO3 CMS has Broken Access Control in its File Abstraction Layer
Medium
CVE-2026-47352
TYPO3 CMS has Broken Access Control in Backend API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.