High
CVE-2026-23542
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2026-39535
Display Eventbrite Events <= 6.5.6 - Missing Authorization
Medium
CVE-2026-25374
Spa and Salon <= 1.3.2 - Missing Authorization
Medium
CVE-2026-32378
Book Landing Page <= 1.2.7 - Missing Authorization
Medium
CVE-2026-32386
Envo Extra <= 1.9.13 - Missing Authorization
Medium
CVE-2026-39667
Korea SNS <= 1.7.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-14294
Razorpay for WooCommerce <= 4.7.8 - Missing Authentication to Unauthenticated Order Modification
Medium
CVE-2026-32382
Digital Download <= 1.1.4 - Missing Authorization
Medium
CVE-2025-13732
s2Member <= 251005 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2026-32372
ShopBuilder – Elementor WooCommerce Builder Addons <= 3.2.4 - Unauthenticated Information Exposure
Medium
CVE-2026-39664
Leadrebel <= 1.0.2 - Missing Authorization
Medium
CVE-2026-39668
Book Previewer for Woocommerce <= 1.0.6 - Missing Authorization
High
CVE-2026-32384
WpBookingly <= 1.2.9 - Authenticated (Contributor+) Local File Inclusion
Low
ghsa-chm2-m3w2-wcxm
OpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch
Medium
CVE-2026-2426
WP-DownloadManager <= 1.69 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'file' Parameter
Medium
CVE-2025-14444
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment
Medium
CVE-2026-26326
OpenClaw skills.status could leak secrets to operator.read clients
High
CVE-2026-26325
OpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals
High
CVE-2026-26324
OpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)
High
CVE-2026-26322
OpenClaw Gateway tool allowed unrestricted gatewayUrl override
High
CVE-2026-26321
OpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension
High
CVE-2026-26320
OpenClaw macOS deep link confirmation truncation can conceal executed agent message
High
CVE-2026-26319
OpenClaw is Missing Webhook Authentication in Telnyx Provider Allows Unauthenticated Requests
High
CVE-2026-28447
OpenClaw has a Path Traversal in Plugin Installation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.