High
CVE-2026-73498
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Low
CVE-2026-10775
SGLang is Vulnerable to DoS via the data_hash Function
Medium
CVE-2026-74020
Koji <= 2.2.1 - Missing Authorization
Medium
CVE-2026-73394
Stitch Express <= 1.9.1 - Missing Authorization
Critical
CVE-2026-73390
Total Donations <= 2.0.5 - Unauthenticated Privilege Escalation
Medium
CVE-2026-73363
E-cab Taxi Booking Manager for Woocommerce < 2.0.8 - Missing Authorization
High
CVE-2025-15637
Shuffle <= 1.8 - Unauthenticated Local File Inclusion
Medium
CVE-2026-66601
Media Library Assistant <= 3.39 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-66616
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.46 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-61986
Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe <= 30.0.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-66582
TranslatePress – Translate Multilingual sites with AI Translation <= 3.3.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73387
Resido - Real Estate WordPress Theme <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2026-73347
TrueBooker – Appointment Booking and Scheduler System <= 1.2.6 - Unauthenticated Privilege Escalation
High
CVE-2026-66592
rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 - Unauthenticated SQL Injection
High
CVE-2026-73185
NGG Smart Image Search < 4.0.0 - Unauthenticated SQL Injection
High
CVE-2026-66590
Tagembed: Social Media Feeds and Customer Reviews Widget <= 7.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-53999
Altair <= 5.2.2 - Missing Authorization
High
CVE-2026-73992
Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2026-66609
TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme <= 5.12.3 - Unauthenticated SQL Injection
High
CVE-2026-66598
B2Bking <= 5.6.07 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-19842
SAML Single Sign On – SSO Login 4.8.85-5.4.6 - Unauthenticated Privilege Escalation
High
CVE-2026-73354
SimplyRETS Real Estate IDX <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-73388
Nikstore Core <= 1.5 - Unauthenticated SQL Injection
High
CVE-2026-28150
Golo Framework < 1.7.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.