Medium
CVE-2026-12734
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filters
Medium
CVE-2026-12729
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX Action
Medium
CVE-2026-12731
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes
Medium
CVE-2026-39520
weDocs <= 2.1.18 - Missing Authorization
Medium
CVE-2025-13921
weDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post Update
Medium
CVE-2025-14574
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-12505
weDocs <= 2.1.14 - Missing Authorization to Settings Update
Medium
CVE-2024-34442
weDocs <= 2.1.4 - Missing Authorization
Medium
84003388-c47c-41db-8d2d-4643aa375a89
Appsero <= 1.2.1 - Missing Authorization
Medium
CVE-2022-47150
Appsero <= 1.2.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.