Hoch
CVE-2026-27099
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.602
Hoch
CVE-2025-13603
WP AUDIO GALLERY <= 2.0 - Authenticated (Subscriber+) Arbitrary File Read via .htaccess Manipulation
Mittel
CVE-2025-13091
Shopire <= 1.0.57 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
Hoch
CVE-2025-12975
CTX Feed – WooCommerce Product Feed Manager <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation
Mittel
CVE-2025-12117
Renden <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Mittel
CVE-2025-12500
Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload
Mittel
CVE-2025-12884
Advanced Ads – Ad Manager & AdSense <= 2.0.14 - Missing Authorization to Authenticated (Subscriber+) Ad Placements Update
Kritisch
CVE-2025-12882
Clasifico Listing <= 2.0 - Unauthenticated Privilege Escalation
Hoch
CVE-2025-12821
NewsBlogger <= 0.2.5.6 - 0.2.5.9 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Mittel
CVE-2025-12116
Drift <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title
Mittel
CVE-2025-12451
Easy SVG Support <= 4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Mittel
CVE-2025-12375
Printful Integration for WooCommerce <= 2.2.11 - Authenticated (Contributor+) Server-Side Request Forgery
Mittel
CVE-2025-11725
Aruba HiSpeed Cache <= 3.0.2 - Missing Authorization to Unauthenticated Plugin's Settings Modification
Mittel
CVE-2025-12081
ACF Photo Gallery Field <= 3.0 - Missing Authorization to Authenticated (Subscriber+) Attachment Metadata Modification
Mittel
CVE-2025-12172
Mailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change
Mittel
CVE-2025-11706
Aruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Scripting
Hoch
CVE-2025-11754
Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure
Hoch
CVE-2026-2653
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer ov
Hoch
CVE-2026-28456
OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway
Hoch
CVE-2026-28482
OpenClaw's unsanitized session ID enables path traversal in transcript file operations
Hoch
CVE-2026-26960
Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
Hoch
ghsa-w5c7-9qqw-6645
OpenClaw inter-session prompts could be treated as direct user instructions
Hoch
CVE-2026-29610
OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)
Mittel
CVE-2026-28476
OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.