Low
CVE-2026-28360
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-28359
NocoDB Vulnerable to Stored Cross-site Scripting via Rich Text Field
Low
CVE-2026-28358
NocoDB Vulnerable to User Enumeration via Password Reset Endpoint
Medium
CVE-2026-28357
NocoDB has Stored Cross-site Scripting via Formula Cell
Critical
CVE-2026-1492
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
High
CVE-2026-2293
Nest has a Fastify URL Encoding Middleware Bypass
High
CVE-2026-2448
Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2026-2628
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
High
CVE-2026-2269
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
Medium
CVE-2026-1487
LatePoint <= 5.2.7 - Authenticated (Administrator+) SQL Injection via JSON Import
Medium
CVE-2026-1336
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification
High
CVE-2026-1566
LatePoint <= 5.2.7 - Authenticated (Agent+) Privilege Escalation
Medium
CVE-2026-2583
Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields
High
CVE-2026-3132
Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_preview
High
CVE-2026-3180
Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection
High
CVE-2026-28015
ShiftCV - Blog \ Resume \ Portfolio \ WordPress Theme <= 3.0.14 - Unauthenticated Local File Inclusion
High
CVE-2026-28019
Manoir <= 1.11 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32438
VW School Education <= 1.4.6 - Missing Authorization
Medium
CVE-2026-28072
pixfort Core <= 3.2.22 - Reflected Cross-Site Scripting
Medium
CVE-2026-32439
BigHearts <= 3.1.14 - Missing Authorization
High
CVE-2026-28034
Progress <= 1.2 - Unauthenticated Local File Inclusion
High
CVE-2026-27985
Humanum <= 1.1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-27996
Lingvico <= 1.0.14 - Unauthenticated Local File Inclusion
Medium
CVE-2026-42642
GiveWP <= 4.14.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.