High
CVE-2026-2576
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2025-6460
Display During Conditional Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via message Parameter
High
CVE-2026-1931
Rent Fetch <= 0.32.4 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter
High
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
High
CVE-2026-25903
Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
High
CVE-2026-22370
Marveland <= 1.3.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-1317
WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name
High
CVE-2026-22368
Redy <= 1.0.2 - Unauthenticated Local File Inclusion
High
CVE-2026-22372
Isida <= 1.4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-14799
Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling
Medium
CVE-2026-1508
Court Reservation – Manage Your Court Bookings Online < 1.10.9 - Cross-Site Request Forgery
High
CVE-2026-22366
Jude <= 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22380
UnlimHost <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22362
Photolia <= 1.0.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22371
Gustavo <= 1.2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-1404
Ultimate Member <= 2.11.1 - Reflected Cross-Site Scripting via Filter Parameters
Medium
CVE-2026-25370
Compress <= 6.60.28 - Missing Authorization
High
CVE-2026-22377
Saveo <= 1.1.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-3075
Simple Ajax Chat <= 20251121 - Unauthenticated Information Exposure
Medium
CVE-2026-22383
PawFriends - Pet Shop and Veterinary WordPress <= 1.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2026-22379
Netmix <= 1.0.10 - Unauthenticated Local File Inclusion
Low
CVE-2026-1582
WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling
High
CVE-2026-22381
PawFriends - Pet Shop and Veterinary WordPress <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2026-22369
Ironfit <= 1.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.