Mittel
CVE-2026-76559
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.456
Filter zurücksetzen
Mittel
CVE-2026-84907
Eventin <= 4.1.23 - Missing Authorization
Mittel
CVE-2026-88912
rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Authenticated (Subscriber+) Insecure Direct Object Reference
Mittel
CVE-2026-86407
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 5.0 - 5.2.7 - Unauthenticated Information Exposure
Mittel
CVE-2026-88995
Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information Exposure
Mittel
CVE-2026-89023
Domain For Sale – Landing Page Per Domain, Domain Mapping, Offers & Listings <= 3.5.1 - Missing Authorization
Mittel
CVE-2026-86790
WP Highlight Box <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2026-77752
Temporary Login Without Password 1.5 - 1.9.8 - Authenticated (Administrator+) Privilege Escalation
Mittel
CVE-2026-84025
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Authenticated (Custom Role+) Insecure Direct Object Reference
Mittel
CVE-2026-82847
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates < 3.4.1 - Authenticated (Custom Role+) Stored Cross-Site Scripting
Mittel
CVE-2026-84023
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request Forgery
Mittel
CVE-2026-18232
Directory Kit <= 1.5.7 - Unauthenticated Information Exposure
Mittel
CVE-2026-78152
SureRank SEO – Meta Tags, Social Preview, XML Sitemap, Schema & Open Graph 1.6.2 - 1.10.0 - Unauthenticated Information Exposure
Mittel
CVE-2026-82851
Masteriyo LMS – LMS Course Builder, Quizzes & Certificates 1.14.0 - 3.4.0 - Authenticated (Custom Role+) Insecure Direct Object Reference
Mittel
CVE-2026-87894
Rox Appointment Booking – Appointment Booking Scheduling Solution 1.0.9 - 1.2.2 - Unauthenticated Insecure Direct Object Reference
Mittel
CVE-2026-16592
Directory Kit <= 1.5.7 - Authenticated (Contributor+) Information Exposure
Mittel
CVE-2026-87797
Sprout Invoices – Client Invoicing & Estimates < 20.8.16 - Authenticated (Subscriber+) Insecure Direct Object Reference
Mittel
CVE-2026-83532
Custom Menu Wizard Widget <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2026-87919
Product XML Feed Manager for WooCommerce – Google Shopping, Social Sites, Skroutz & More < 3.1.1 - Missing Authorization
Mittel
CVE-2026-84024
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request Forgery
Mittel
CVE-2026-87918
WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services < 8.5.7 - Missing Authorization
Mittel
CVE-2026-16593
Directory Kit <= 1.5.7 - Authenticated (Editor+) SQL Injection
Mittel
CVE-2026-85198
MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path
Hoch
CVE-2026-85200
GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.