High
CVE-2026-22453
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-22465
BuddyApp <= 1.9.2 - Reflected Cross-Site Scripting
High
CVE-2026-22417
Grand Wedding < 3.1.11 - Unauthenticated PHP Object Injection
High
CVE-2026-2568
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-1492
User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration
High
CVE-2026-2448
Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2026-2628
All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass
High
CVE-2026-2269
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
Medium
CVE-2026-1487
LatePoint <= 5.2.7 - Authenticated (Administrator+) SQL Injection via JSON Import
Medium
CVE-2026-1336
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification
High
CVE-2026-1566
LatePoint <= 5.2.7 - Authenticated (Agent+) Privilege Escalation
Medium
CVE-2026-2583
Blocksy <= 2.1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via `blocksy_meta` Fields
High
CVE-2026-3132
Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_preview
High
CVE-2026-3180
Contest Gallery <= 28.1.4 - Unauthenticated SQL Injection
High
CVE-2026-28015
ShiftCV - Blog \ Resume \ Portfolio \ WordPress Theme <= 3.0.14 - Unauthenticated Local File Inclusion
High
CVE-2026-28019
Manoir <= 1.11 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32438
VW School Education <= 1.4.6 - Missing Authorization
Medium
CVE-2026-28072
pixfort Core <= 3.2.22 - Reflected Cross-Site Scripting
Medium
CVE-2026-32439
BigHearts <= 3.1.14 - Missing Authorization
High
CVE-2026-28034
Progress <= 1.2 - Unauthenticated Local File Inclusion
High
CVE-2026-27985
Humanum <= 1.1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-27996
Lingvico <= 1.0.14 - Unauthenticated Local File Inclusion
Medium
CVE-2026-42642
GiveWP <= 4.14.5 - Missing Authorization
High
CVE-2026-27989
Quanzo - Creative Portfolio Template Kit <= 1.0.10 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.