Medium
ghsa-8cp7-rp8r-mg77
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-32005
OpenClaw: Slack interactive callbacks could skip configured sender checks in some shared-workspace flows
Medium
CVE-2026-28343
CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package
Low
CVE-2025-68467
Dark Reader gives users the ability to request style sheets from local web servers
High
CVE-2025-66024
XWiki Blog Application home page vulnerable to Stored XSS via Post Title
Unrated
CVE-2026-3532
drupal/openid_connect - SA-CONTRIB-2026-027
Unrated
CVE-2026-3531
drupal/openid_connect - SA-CONTRIB-2026-026
Unrated
CVE-2026-3530
drupal/openid_connect - SA-CONTRIB-2026-025
Unrated
CVE-2026-3529
drupal/ga4_google_analytics - SA-CONTRIB-2026-024
Unrated
CVE-2026-3528
drupal/calculation_fields - SA-CONTRIB-2026-023
Unrated
CVE-2026-3527
drupal/ajax_dashboard - SA-CONTRIB-2026-022
Unrated
CVE-2026-3526
drupal/file_access_fix - SA-CONTRIB-2026-021
Unrated
CVE-2026-3525
drupal/file_access_fix - SA-CONTRIB-2026-020
Medium
CVE-2026-3072
Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification
Medium
CVE-2026-3523
Apocalypse Meow <= 22.1.0 - Authenticated (Administrator+) SQL Injection via 'type' Parameter
Medium
CVE-2026-3034
OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls
Medium
CVE-2026-2899
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
High
CVE-2026-2365
Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission
Critical
CVE-2026-27446
Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions
Medium
CVE-2025-66168
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
Medium
CVE-2026-3242
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Medium
CVE-2026-3241
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Medium
CVE-2026-3244
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Low
CVE-2026-2994
Concrete CMS vulnerable to Cross-Site Request Forgery (CSRF)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.