High
CVE-2026-42380
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2026-42385
Profile Builder Pro <= 3.15.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-42386
Order Delivery Date for WooCommerce <= 4.5.1 - Unauthenticated SQL Injection
High
CVE-2026-3220
Multiple Plugins <= Multiple Versions - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-42410
TheGem Theme Elements < 5.12.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-42379
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! <= 3.6.1 - Authenticated (Contributor+) Information Exposure
High
CVE-2026-7106
Highland Software Custom Role Manager <= 1.0.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-45001
OpenClaw: Agent gateway config mutations could change protected operator settings
Medium
CVE-2026-44998
OpenClaw: Bundled MCP/LSP tools could bypass configured tool policy
Medium
CVE-2026-44992
OpenClaw: Workspace dotenv MiniMax host override could redirect credentialed requests
Low
CVE-2026-45000
OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks
Low
CVE-2026-41909
OpenClaw: Paired-device pairing actions were not limited to the caller device
Medium
CVE-2026-44117
OpenClaw: QQBot direct media upload skipped URL SSRF validation
Medium
CVE-2026-44995
OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config
Low
CVE-2026-44999
OpenClaw: Isolated cron awareness events were recorded as trusted system events
High
CVE-2026-44114
OpenClaw: Workspace dotenv could override runtime-control environment variables
Medium
CVE-2026-44993
OpenClaw: Feishu card actions could misclassify DMs and skip dmPolicy
Low
CVE-2026-41908
OpenClaw: Assistant media route missed scope enforcement for trusted-proxy authorization
Medium
CVE-2026-45002
OpenClaw: Hook mapping templates could bypass hook session-key opt-in
Medium
CVE-2026-42282
n8n-MCP: Sensitive MCP tool-call arguments logged on authenticated requests in HTTP mode
Medium
CVE-2026-6982
ShowDoc has an Injection vulnerability
High
CVE-2026-6951
simple-git is vulnerable to Remote Code Execution
Medium
CVE-2026-41481
LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass
Low
CVE-2026-41488
langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.