High
CVE-2026-88056
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Medium
CVE-2026-88059
Angular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`
Medium
CVE-2026-88057
Angular: Sanitization bypass via directive host bindings on concrete host elements in @angular/core and @angular/compiler
High
CVE-2026-55416
Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration
High
CVE-2026-86082
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
High
CVE-2026-86081
n8n: Regular Expression Denial of Service in the Default Blocked-File-Pattern Match via a Git Node Clone Path
High
CVE-2026-86075
n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
High
CVE-2026-86076
n8n: Expression Sandbox Escape via Class-Field Sanitizer Rebinding Can Lead to Code Execution
High
ghsa-x7m8-jrm8-hpvx
@eigenpal/docx-editor-react: CSS injection and print-time XSS via unescaped embedded font-family name
Medium
CVE-2026-11446
Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
Medium
CVE-2026-18562
HUSKY <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-77150
Unlimited Elements For Elementor <= 2.0.16 - Reflected Cross-Site Scripting
Medium
CVE-2026-84960
WP-Members Membership Plugin <= 3.5.6 - Reflected Cross-Site Scripting
Medium
CVE-2026-78172
Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting
High
CVE-2026-81754
Vigilant <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-81825
Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-18579
WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-18561
Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection
High
CVE-2026-15462
Sticky Chat Widget <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2026-18964
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-19985
Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting
High
CVE-2026-19991
UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2026-12215
OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force
Medium
CVE-2026-11496
Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.