Medium
CVE-2026-11778
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-57749
SportsPress Pro <= 2.7.29 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-57794
Golo Framework <= 1.7.3 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-57786
WorkScout-Core <= 1.7.08 - Cross-Site Request Forgery
Medium
CVE-2026-57779
Fascinate <= 1.1.5 - Missing Authorization
High
CVE-2026-57791
Brook - Agency Business Creative WordPress Theme <= 2.9.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-57766
WPIDE – File Manager & Code Editor <= 3.5.6 - Cross-Site Request Forgery
Medium
CVE-2026-14306
Tutor LMS <= 3.9.13 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-57765
Shopping Cart & eCommerce Store <= 5.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-57755
Mosaic Gallery – Advanced Gallery <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-57783
Speaker <= 4.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2026-57790
Billey <= 2.1.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-57760
Sendcloud Shipping <= 1.0.31 - Missing Authorization
Medium
CVE-2026-57778
Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization
High
CVE-2026-57804
TheGem Theme Elements <= 5.11.1 - Authenticated (Contributor+) Local File Inclusion
Unrated
pysec-2026-611
Malicious code in uprobe (PyPI)
Medium
CVE-2026-54262
Wagtail: Pages translations can be created without page permissions when using simple_translation
Medium
CVE-2026-54260
Wagtail: Denial of service via unbounded filter specs in the image preview
Medium
CVE-2026-54261
Wagtail: Improper permission handling in image preview
Medium
CVE-2026-54259
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
High
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
Medium
CVE-2026-62208
OpenClaw MCP SSE redirects could forward Authorization headers
Unrated
pysec-2026-610
Malicious code in ufish (PyPI)
High
CVE-2026-50143
Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.