High
CVE-2025-50004
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-22330
Right Way <= 4.0 - Unauthenticated Local File Inclusion
High
CVE-2025-67617
Consult Aid <= 1.4.3 - Unauthenticated PHP Object Injection
Medium
CVE-2025-54002
xSmart <= 1.2.9.4 - Missing Authorization
Medium
CVE-2026-0684
CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import
High
CVE-2025-67616
Mella <= 1.2.29 - Unauthenticated Local File Inclusion
High
CVE-2026-22326
Reprizo <= 1.0.8 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24615
Cream Magazine <= 2.1.10 - Missing Authorization
Medium
CVE-2026-24616
WP Popups <= 2.2.0.5 - Missing Authorization
High
CVE-2025-68493
Apache Struts 2 is Missing XML Validation
Medium
CVE-2026-24617
Easy Modal <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24619
PopCash.Net Code Integration Tool <= 1.8 - Missing Authorization
Medium
CVE-2026-27059
Penci Recipe <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-27058
Penci Podcast <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24392
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.14.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-24967
Amelia <= 1.2.38 - Missing Authorization
Medium
CVE-2026-27056
Solid Central – Site Management, Backups, Security, and Reporting <= 3.2.8 - Missing Authorization
Medium
CVE-2026-27055
Penci AI SmartContent Creator <= 2.0 - Missing Authorization
Medium
CVE-2026-27057
Penci Filter Everything <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69361
Post Expirator <= 4.9.3 - Missing Authorization
Medium
CVE-2026-24354
Penci Shortcodes & Performance <= 6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24620
Landing Page Builder <= 1.5.3.4 - Authenticated (Author+) Stored Cross-Site Scripting
Low
CVE-2026-0824
QuestDB UI's Web Console is Vulnerable to Cross-Site Scripting
Medium
CVE-2026-24621
Terms descriptions <= 3.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.