Unrated
CVE-2026-3528
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Unrated
CVE-2026-3527
drupal/ajax_dashboard - SA-CONTRIB-2026-022
Unrated
CVE-2026-3526
drupal/file_access_fix - SA-CONTRIB-2026-021
Unrated
CVE-2026-3525
drupal/file_access_fix - SA-CONTRIB-2026-020
Medium
CVE-2026-3072
Media Library Assistant <= 3.33 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Taxonomy Modification
Medium
CVE-2026-3523
Apocalypse Meow <= 22.1.0 - Authenticated (Administrator+) SQL Injection via 'type' Parameter
Medium
CVE-2026-3034
OoohBoi Steroids for Elementor <= 2.1.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls
Medium
CVE-2026-2899
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
High
CVE-2026-2365
Fluent Forms Pro <= 6.1.17 - Unauthenticated Stored Cross-Site Scripting via Draft Form Submission
Critical
CVE-2026-27446
Apache Artemis and Apache ActiveMQ Artemis are Missing Authentication for Critical Functions
Medium
CVE-2025-66168
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
Medium
CVE-2026-3242
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Medium
CVE-2026-3241
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Medium
CVE-2026-3244
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Low
CVE-2026-2994
Concrete CMS vulnerable to Cross-Site Request Forgery (CSRF)
High
CVE-2026-3452
Concrete CMS vulnerable to Remote Code Execution by stored PHP object injection
Medium
CVE-2026-3240
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
High
CVE-2026-1720
WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
High
CVE-2026-22477
Felizia | Fertility Center & Medical WordPress Theme <= 1.3.4 - Unauthenticated Local File Inclusion
Critical
CVE-2026-27098
Au Pair Agency - Babysitting & Nanny Theme <= 1.2.2 - Unauthenticated PHP Object Injection
High
CVE-2026-1321
Membership Plugin – Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level'
High
CVE-2026-22478
FindAll - Business Directory WordPress Theme <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-27326
AC Services | HVAC, Air Conditioning & Heating Company WordPress <= 1.2.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32442
e2pdf <= 1.28.15 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.