High
CVE-2026-1844
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2026-1841
PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-1721
Cloudflare Agents is Vulnerable to Reflected Cross-Site Scripting in the AI Playground's OAuth callback handler
Medium
CVE-2026-39636
Livemesh Addons for Elementor <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39635
Grand Magazine <= 3.5.5 - Cross-Site Request Forgery
Medium
CVE-2026-39630
Getty Images <= 4.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-32350
Chocolate House <= 1.1.5 - Missing Authorization
Medium
CVE-2025-15485
Auto x LINE <= 1.0.0 - Missing Authorization
Medium
CVE-2026-1128
eCommerce <= 3.15.1 - Cross-Site Request Forgery to Coupon Deletion
Medium
CVE-2026-39632
Grand Blog <= 3.1 - Cross-Site Request Forgery
Medium
CVE-2025-14608
WP Last Modified Info <= 1.9.5 - Insecure Direct Object Reference to Authenticated (Author+) Post Metadata Modification
Medium
CVE-2026-32351
PowerPress Podcasting <= 11.15.13 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-32353
MailerPress <= 1.4.2 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-32352
Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-39637
Mogi <= 1.2.3 - Missing Authorization
Medium
CVE-2026-39631
WPSchoolPress <= 2.2.36 - Missing Authorization
Critical
CVE-2026-2446
Powerpack for LearnDash <= 1.2.0 - Unauthenticated Arbitrary Options Update
High
CVE-2026-42641
Share This Image <= 2.14 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-39634
Grand Portfolio <= 3.3 - Cross-Site Request Forgery
Medium
CVE-2026-39633
Grand Car Rental <= 3.6.9 - Cross-Site Request Forgery
Critical
CVE-2025-69633
Improper neutralization of SQL parameters in Advanced Popup Creator module from Idnovate for PrestaShop
Medium
CVE-2019-25338
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames t
Medium
CVE-2026-26185
Directus Vulnerable to User Enumeration via Password Reset Timing Attack
High
CVE-2026-61701
MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.