High
CVE-2026-57379
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2026-57368
Noo JobMonster <= 4.8.5 - Reflected Cross-Site Scripting
High
CVE-2026-57381
Property Hive <= 2.2.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14870
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Reflected Cross-Site Scripting
High
CVE-2026-57386
aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder < 2.9.1 - Authenticated (Contributor+) Privilege Escalation
High
CVE-2026-57374
FunnelKit Funnel Builder Pro <= 3.15.0.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-13692
PayU CommercePro < 3.9.0 - Missing Authorization
Medium
CVE-2026-57370
Visitor Traffic Real Time Statistics pro <= 11.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-14842
Events Made Easy <= 3.1.1 - Unauthenticated Payment Bypass
Medium
CVE-2026-13605
Photo Swipe <= 4.1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-57382
Simple File List <= 6.3.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-59521
Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials <= 3.1.15 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2026-62238
OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
High
CVE-2026-55501
9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
Critical
CVE-2026-55500
9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover
High
CVE-2026-55794
Craft CMS: Potential authenticated Remote Code Execution via referrer redirect
Medium
CVE-2026-55793
Craft CMS: Stored XSS via Structure entry title in table view
Medium
CVE-2026-59711
showdown metadata title handling allows cross-site scripting
Medium
CVE-2026-55792
Craft CMS: Sensitive File Disclosure / Server-Side File Read
High
CVE-2026-55790
Craft CMS: DOM XSS via GitHub issue title in CraftSupport widget
Critical
CVE-2026-59801
9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats
High
CVE-2026-57573
Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)
Critical
CVE-2026-57572
Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
High
CVE-2026-55574
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.