High
CVE-2026-55072
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-45819
baseline-browser-mapping process termination on invalid input causes denial of service
High
CVE-2026-73624
GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)
High
CVE-2026-73623
GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks
Medium
CVE-2026-73621
GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count
High
CVE-2026-73620
GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read
High
CVE-2026-73622
GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)
High
CVE-2026-73625
GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution
Medium
CVE-2026-73619
GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file / --add-virtual-file, enabling arbitrary file read via Repo.archive()
Medium
CVE-2026-28182
AcyMailing SMTP Newsletter <= 10.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-13177
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce < 4.1.20 - Authenticated (Contributor+) Information Exposure
Critical
CVE-2026-28192
Piotnet Addons For Elementor Pro <= 7.1.67 - Unauthenticated Arbitrary File Upload
High
CVE-2025-53345
Thim Core <= 2.3.3 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2026-28187
Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-28154
Samex - Clean, Minimal Shop WooCommerce WordPress <= 2.5 - Reflected Cross-Site Scripting
Critical
CVE-2026-28185
Log in with Google <= 1.4.2 - Authentication Bypass
Medium
CVE-2026-14230
ECS <= 4.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-28175
Visitors Traffic Real Time Statistics <= 8.11 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-73403
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.6 - Missing Authorization
Critical
CVE-2026-61979
SAML Single Sign On – SSO Login <= 5.4.3 - Unauthenticated Privilege Escalation
Medium
CVE-2026-14229
ECS <= 4.3.7 - Missing Authorization to Unauthenticated Private Content Disclosure
Medium
CVE-2026-61984
WPMobile.App <= 11.77 - Missing Authorization
High
CVE-2026-61980
OMGF Pro <= 5.2.7 - Unauthenticated Arbitrary File Download
Medium
CVE-2026-28155
Do Lasso <= 358 - Unauthenticated Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.