Unrated
CVE-2026-2348
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2018-25157
Phraseanet vulnerable to stored cross-site scripting through crafted file names
Medium
CVE-2019-25317
Kimai 2 vulnerable to persistent cross-site scripting in the timesheet descriptions
Critical
CVE-2026-26021
set-in Affected by Prototype Pollution
Medium
CVE-2026-26019
@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation
High
CVE-2026-26010
Leaky JWTs in OpenMetadata exposing highly-privileged bot users
Medium
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
Critical
CVE-2026-1729
AdForest <= 6.0.12 - Authentication Bypass
Medium
CVE-2026-32348
MAS Videos <= 1.3.2 - Missing Authorization
High
CVE-2025-69405
Lorem Ipsum | Books & Media Store <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-68526
Modal Popup Box <= 1.6.1 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-39625
TechOne <= 3.0.3 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-69400
Yokoo <= 1.1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69404
Extreme Store <= 1.5.7 - Unauthenticated PHP Object Injection
Medium
CVE-2025-69401
WooODT Lite <= 2.5.5 - Unauthenticated Payment Bypass
Medium
CVE-2025-68501
Mollie Payments for WooCommerce <= 8.1.1 - Reflected Cross-Site Scripting
High
CVE-2026-22344
FiveStar <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69409
PJ | Life & Business Coaching <= 3.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32345
Perfect Portfolio <= 1.2.4 - Missing Authorization
Medium
CVE-2026-39622
Education Base <= 3.0.8 - Missing Authorization
High
CVE-2026-39623
Biolife <= 3.2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-69329
Prestige < 1.4.1 - Unauthenticated PHP Object Injection
High
CVE-2025-69395
Gable <= 1.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32346
Travel Agency <= 1.5.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.