Medium
CVE-2026-1404
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-25370
Compress <= 6.60.28 - Missing Authorization
High
CVE-2026-22377
Saveo <= 1.1.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-3075
Simple Ajax Chat <= 20251121 - Unauthenticated Information Exposure
Medium
CVE-2026-22383
PawFriends - Pet Shop and Veterinary WordPress <= 1.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2026-22379
Netmix <= 1.0.10 - Unauthenticated Local File Inclusion
Low
CVE-2026-1582
WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling
High
CVE-2026-22381
PawFriends - Pet Shop and Veterinary WordPress <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22369
Ironfit <= 1.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-15489
Passster <= 4.2.23 - Unauthenticated Protected Content Disclosure
High
CVE-2026-22374
Zio Alberto <= 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69337
Wolmart Core <= 1.9.6 - Unauthenticated SQL Injection
High
CVE-2026-22375
Impacto Patronus <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22365
Soleng <= 1.0.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-2230
Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification
High
CVE-2026-22363
Rhodos <= 1.3.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-15490
Passster <= 4.2.25 - Unauthenticated Global Content Protection Bypass
High
CVE-2026-22364
SevenTrees <= 1.0.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-0829
Frontend File Manager <= 23.5 - Missing Authorization
High
CVE-2025-68549
Wiguard < 2.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2026-22361
A-Mart <= 1.0.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22373
Fooddy <= 1.3.10 - Unauthenticated Local File Inclusion
High
CVE-2026-22378
Blabber <= 1.7.0 - Unauthenticated Local File Inclusion
High
CVE-2026-1426
Advanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.