High
CVE-2026-32401
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-39683
Garden Gnome Package <= 2.5.1 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2026-39681
Homeo <= 1.2.59 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-45210
Broadstreet Ads <= 1.52.2 - Missing Authorization
Medium
CVE-2026-27576
OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs
Medium
CVE-2026-27568
AVideo has Stored Cross-Site Scripting via Markdown Comment Injection
Medium
CVE-2026-27492
Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused
Medium
CVE-2026-27488
OpenClaw hardened cron webhook delivery against SSRF
Medium
CVE-2026-27485
OpenClaw: Reject symlinks in local skill packaging script
Low
CVE-2026-27484
OpenClaw Discord moderation authorization used untrusted sender identity in tool-driven flows
Medium
CVE-2025-14339
weMail <= 2.0.7 - Missing Authorization to Unauthenticated Form Deletion
Medium
CVE-2025-67438
Sync-in Server has a stored cross-site scripting (XSS) vulnerability
Low
ghsa-83pf-v6qq-pwmr
Fickling has a detection bypass via stdlib network-protocol constructors
Critical
CVE-2026-25896
fast-xml-parser has an entity encoding bypass via regex injection in DOCTYPE entity names
Medium
CVE-2026-2739
bn.js affected by an infinite loop
Medium
CVE-2026-39678
Pinpoint Booking System <= 2.9.9.6.5 - Missing Authorization
Medium
CVE-2026-32398
TeraWallet – For WooCommerce <= 1.5.15 - Authenticated (Customer+) Race Condition
Medium
CVE-2026-32399
Media LIbrary Assistant <= 3.32 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-32397
Filter & Grids <= 3.5.1 - Missing Authorization
Medium
CVE-2026-25387
Image Optimizer by Elementor <= 1.7.1 - Missing Authorization
High
CVE-2026-32400
Boldman <= 7.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-25389
EventPrime <= 4.2.8.3 - Unauthenticated Information Exposure
High
CVE-2026-26370
Survey Maker by AYS < 5.1.7.7 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-27540
Woocommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.