Hoch
CVE-2026-11590
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.456
Filter zurücksetzen
Hoch
CVE-2017-20249
Apptha Slider Gallery <= 1.0 - Unauthenticated SQL Injection
Mittel
CVE-2025-8444
Animation Addons for Elementor – GSAP Powered Elementor Addons & Website Templates <= 2.6.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters
Hoch
CVE-2026-52693
eCommerce Product Catalog Plugin for WordPress <= 3.5.5 - Unauthenticated SQL Injection
Mittel
CVE-2026-9576
Fluent Booking <= 2.1.1 - Authenticated (Calendar Manager+) Information Exposure
Mittel
CVE-2026-11581
Kali Forms <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2017-20245
Wow Viral Signups <= 2.1 - Unauthenticated SQL Injection
Hoch
CVE-2026-11589
Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2017-20250
Mac Photo Gallery <= 3.0 - Unauthenticated Arbitrary File Deletion
Hoch
CVE-2017-20246
KittyCatfish <= 2.2 - Unauthenticated SQL Injection
Hoch
CVE-2017-20243
Car Park Booking System <= 1.0 - Unauthenticated SQL Injection
Hoch
CVE-2017-20248
Apptha Slider Gallery <= 1.0 - Unauthenticated Arbitrary File Download
Mittel
CVE-2026-49068
Coupon Affiliates – Affiliate Plugin for WooCommerce <= 7.8.1 - Authenticated (Subscriber+) Information Exposure
Hoch
CVE-2016-20062
Simply Poll <= 1.4.1 - Unauthenticated SQL Injection
Mittel
CVE-2026-4058
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation
Hoch
CVE-2026-8365
Blocksy <= 2.1.41 - Authenticated (Contributor+) PHP Object Injection via Deserialization of Untrusted Data via 'blocksy_meta' REST API Field
Mittel
CVE-2026-8677
Prime Elementor Addons <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget HTML Tag Settings
Mittel
CVE-2026-8599
MailerPress <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via Campaign HTML Content Field
Mittel
CVE-2026-7542
Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure
Hoch
CVE-2026-11616
Events Calendar for GeoDirectory <= 2.3.28 - Authenticated (Subscriber+) Privilege Escalation
Mittel
CVE-2026-11603
Product Filter Widget for Elementor <= 1.0.6 - Reflected Cross-Site Scripting via 'args[filterFormArray]' Parameter
Mittel
CVE-2026-8895
kk blog card <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Mittel
CVE-2026-10553
jQuery Hover Footnotes <= 1.4 - Cross-Site Request Forgery to Plugin Settings Update
Mittel
CVE-2026-10738
jQuery Hover Footnotes <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via Footnote Qualifier ('{{...}}' Syntax)
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.