High
CVE-2026-8073
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
Medium
CVE-2026-8096
Kirki <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure via 'kirki_wp_admin_get_apis' Action
High
CVE-2026-3430
Creative Mail <= 1.6.9 - Unauthenticated SQL Injection
Medium
CVE-2026-47100
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Missing Authorization
Medium
CVE-2026-45442
The Ultimate Video Player For WordPress – by Presto Player <= 4.1.3 - Missing Authorization
High
CVE-2026-42727
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.8 - Unauthenticated SQL Injection
Medium
CVE-2026-45435
WP Activity Log <= 5.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-4986
WPForms Lite <= 1.10.0.4 - Unauthenticated Payment Bypass
Medium
CVE-2026-45245
Summarize's hover summary feature allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links
Low
CVE-2026-45244
Summarize contains a missing authorization vulnerability
High
CVE-2026-45242
Summarize contains a path traversal vulnerability
Medium
CVE-2026-45243
Summarize contains a missing authorization vulnerability
Medium
CVE-2026-46559
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
Medium
CVE-2026-46557
ImageMagick: Stack overflow in fx operation
Medium
CVE-2026-46523
ImageMagick: Use-After-Free in MSL decoder.
High
CVE-2026-46522
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
Medium
CVE-2026-46521
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
High
CVE-2026-46520
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
Medium
CVE-2026-45664
ImageMagick: Policy Bypass in MNG coder could
Medium
CVE-2026-45624
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
High
CVE-2026-45367
HAPI FHIR: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
High
CVE-2026-35433
Microsoft Security Advisory CVE-2026-35433 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-42899
Microsoft Security Advisory CVE-2026-42899 – ASP.NET Core Denial of Service Vulnerability
High
CVE-2026-32175
Microsoft Security Advisory CVE-2026-32175 – .NET Core Tampering Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.