Medium
CVE-2026-77088
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Critical
CVE-2026-48713
i18next-fs-backend vulnerable to prototype pollution via crafted missing-key string
Critical
CVE-2026-48714
i18next-http-middleware: MissingKeyHandler does not reject keys whose segments contain prototype-polluting names
High
CVE-2026-46560
OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing
High
CVE-2026-46498
OpenAM Arbitrary OAuth Token Minting via Push Registration
Medium
CVE-2026-46406
@anthropic-ai/claude-code has an Insecure Temporary File in /copy Command that Enables Response Disclosure and Symlink-Based File Write
High
CVE-2026-45794
OpenAM has Unsafe Java Deserialization via SNS
Unrated
pysec-2026-233
Malicious code in gpsea (PyPI)
Unrated
pysec-2026-231
Malicious code in embiggen (PyPI)
Medium
CVE-2026-13226
Groundhogg <= 4.5.4 - Authenticated (Custom+) SQL Injection via 'after' Parameter
High
CVE-2026-47110
Tiptap contains an input validation vulnerability resulting in DoS
Medium
CVE-2026-56060
Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 - Unauthenticated Information Exposure
Medium
CVE-2026-57312
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI <= 3.4.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-57619
Elementor Website Builder – more than just a page builder <= 4.1.3 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2026-56064
Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin <= 2.22.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-56062
Quotes llama <= 3.1.5 - Unauthenticated SQL Injection
Medium
CVE-2026-10599
Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass
High
CVE-2026-57658
TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder <= 4.2.0 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2026-57622
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System <= 3.0.14 - Missing Authorization
Medium
CVE-2026-56066
ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization <= 3.11.4 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-12978
FunnelKit <= 3.15.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-9710
Cornerstone < 7.8.8 - Missing Authorization
Medium
CVE-2026-56051
TablePress – Tables in WordPress made easy <= 3.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-57430
SEOPress PRO <= 9.1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.