Medium
CVE-2026-25393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2026-25019
Atarim <= 4.3.1 - Missing Authorization
Medium
CVE-2026-25392
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress <= 1.4.1 - Unauthenticated Open Redirect
Critical
CVE-2026-25047
deepHas vulnerable to Prototype Pollution via constructor.prototype
Critical
CVE-2026-40035
Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
Medium
CVE-2026-24888
Maker.js has Unsafe Property Copying in makerjs.extendObject
High
CVE-2026-23864
React Server Components have multiple Denial of Service Vulnerabilities
Medium
CVE-2025-68005
Easy Hotel Booking <= 1.8.4 - Missing Authorization
Critical
CVE-2026-22341
Booked <= 3.0.0 - Authentication Bypass
Medium
CVE-2026-25407
Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode <= 4.6.4 - Missing Authorization
Medium
CVE-2025-68042
Travelpayouts <= 1.2.3 - Missing Authorization
Medium
CVE-2026-25323
OSM – OpenStreetMap <= 6.1.12 - Missing Authorization
Medium
CVE-2026-25321
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Missing Authorization
High
CVE-2025-69371
KindlyCare <= 1.6.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-68854
ID Arrays <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-25402
Echo Knowledge Base – Documentation, FAQs, AI Chat & AI Search <= 16.011.0 - Missing Authorization
Medium
CVE-2025-67547
Konte <= 2.4.6 - Missing Authorization
Medium
CVE-2026-25404
WP Job Manager <= 2.4.0 - Missing Authorization
Medium
CVE-2026-25322
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.22 - Cross-Site Request Forgery
Medium
CVE-2026-25408
Broken Link Notifier <= 1.3.5 - Missing Authorization
Medium
CVE-2026-24368
The Grid < 2.8.0 - Missing Authorization
Medium
CVE-2026-24383
B Slider <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-25016
Nelio Popups <= 1.3.5 - Missing Authorization
Medium
CVE-2025-68051
Shiprocket <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.