Medium
CVE-2026-73346
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-65640
WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload
Medium
CVE-2026-28148
Headless SSO Plugin for WP <= 1.6 - Missing Authorization
Medium
CVE-2026-28008
OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 - Missing Authorization
High
CVE-2026-28149
Headless Single Sign On <= 1.6 - Unauthenticated PHP Object Injection
Medium
CVE-2026-62902
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
High
CVE-2026-62871
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62897
Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability
High
CVE-2026-70354
Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability
Medium
CVE-2026-62909
Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62886
Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability
High
CVE-2026-62901
Microsoft Security Advisory CVE-2026-62901 – .NET Denial of Service Vulnerability
Medium
CVE-2026-62899
Microsoft Security Advisory CVE-2026-62899 – .NET Security Feature Bypass Vulnerability
High
CVE-2026-62898
Microsoft Security Advisory CVE-2026-62898 – .NET Information Disclosure Vulnerability
High
CVE-2026-18961
Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect <= 1.4.3 - Unauthenticated Authentication Bypass via Spotify OAuth Callback
High
CVE-2026-15606
Frontend Admin by DynamiApps <= 3.29.9 - Authenticated (Subscriber+) Arbitrary Password Reset via Encrypted Object Token
High
CVE-2026-19091
GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revision
Critical
CVE-2026-16230
Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Deletion via Signature Field
High
CVE-2026-13457
InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure
High
CVE-2026-15426
AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update
High
CVE-2026-58230
SAP Approuter has an Information Disclosure vulnerability
High
CVE-2026-66653
Barista <= 2.5.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-66658
Reviewer <= 3.14.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-66656
Foton Core <= 1.1.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.