Critical
CVE-2026-27983
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2026-28017
Green Thumb <= 1.1.12 - Unauthenticated Local File Inclusion
Medium
CVE-2026-39709
The Tribal <= 1.3.4 - Unauthenticated Information Exposure
High
CVE-2026-28045
N7 | Golf Club Sports & Events <= 2.16.0 - Unauthenticated Local File Inclusion
High
CVE-2026-28007
Coinpress <= 1.0.14 - Unauthenticated Local File Inclusion
High
CVE-2026-27991
Avventure <= 1.1.12 - Unauthenticated Local File Inclusion
High
CVE-2026-27997
Maxify <= 1.0.16 - Unauthenticated Local File Inclusion
High
CVE-2026-28012
Gridiron <= 1.0.14 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32437
VW Portfolio <= 1.3.3 - Missing Authorization
High
CVE-2026-27988
Equadio <= 1.1.3 - Unauthenticated Local File Inclusion
High
CVE-2026-28426
Statamic vulnerable to privilege escalation via stored cross-site scripting
High
CVE-2026-28425
Statamic vulnerable to remote code execution via Antlers-enabled control panel inputs
Medium
CVE-2026-28424
Statamic's missing authorization allows access to email addresses
Medium
CVE-2026-28423
Statamic Vulnerable to Server-Side Request Forgery via Glide
High
CVE-2026-3304
Multer vulnerable to Denial of Service via incomplete cleanup
High
CVE-2026-2359
Multer vulnerable to Denial of Service via resource exhaustion
Medium
CVE-2026-39705
MIPL WC Multisite Sync <= 1.4.4 - Missing Authorization
Medium
CVE-2026-32431
Astra Bulk Edit <= 1.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39707
Accept PayPal Payments using Contact Form 7 <= 4.0.5 - Missing Authorization
Medium
CVE-2026-39708
UiCore Elements <= 1.3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32427
VW Education Lite <= 2.2.0 - Missing Authorization
Medium
CVE-2026-39700
WowOptin <= 1.4.37 - Missing Authorization
Medium
CVE-2026-32429
Magical Addons For Elementor <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-32430
PowerPack Addons for Elementor <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.