Medium
CVE-2026-39561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-27054
Penci Soledad Data Migrator <= 1.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-39595
W3 Total Cache <= 2.9.1 - Missing Authorization
High
CVE-2026-2626
Divi Booster < 5.0.2 - Unauthenticated PHP Object Injection
Medium
CVE-2026-1753
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder < 1.6.1 - Missing Authorization to Authenticated (Contributor+) Settings Update
Critical
CVE-2026-27051
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation
Medium
CVE-2026-27068
Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting
Critical
CVE-2026-2631
Datalogics Ecommerce Delivery – Datalogics < 2.6.60 - Unauthenticated Privilege Escalation
High
CVE-2026-27070
Everest Forms Pro <= 1.9.12 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-24611
MetForm Pro <= 3.9.8 - Missing Authorization
Medium
CVE-2026-27071
WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution <= 3.0.7 - Missing Authorization
High
CVE-2026-24969
Instant VA <= 1.0.1 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-24968
Xagio SEO – AI Powered SEO <= 7.1.0.30 - Unauthenticated Privilege Escalation
Medium
CVE-2026-2687
Reading progressbar < 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2026-1540
Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Remote Code Execution
High
CVE-2026-2466
DukaPress <= 3.2.4 - Unauthenticated Stored Cross-Site Scripting
Low
CVE-2026-32109
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
Low
CVE-2026-32108
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
High
CVE-2026-26127
.NET Denial of Service Vulnerability
High
CVE-2026-26130
.NET Denial of Service Vulnerability
High
CVE-2026-31958
Tornado is vulnerable to DoS due to too many multipart parts
Critical
CVE-2026-31900
Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, use_pyproject: true, for reading the version of Black to use from
Medium
CVE-2026-32094
Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
High
CVE-2026-26131
.NET Elevation of Privilege Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.