Medium
CVE-2022-39348
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2022-3697
Ansible leaks password to logs
Medium
CVE-2021-23385
Flask-Security vulnerable to Open Redirect
Medium
CVE-2022-3644
Plaintext storage of tokens in pulp_ansible
High
CVE-2022-1941
protobuf-cpp and protobuf-python have potential Denial of Service issue
High
CVE-2022-42906
Powerline Gitstatus vulnerable to arbitrary code execution
Medium
CVE-2026-59710
showdown allows stored cross-site scripting through table header ID injection
Medium
CVE-2026-57367
WP Booking System – Booking Calendar Premium < 5.12.8.1 - Missing Authorization
Medium
CVE-2026-57385
Vitepos – Point of Sale (POS) for WooCommerce <= 3.4.2 - Authenticated (Cashier+) SQL Injection
Medium
CVE-2026-57373
FunnelKit Funnel Builder Pro <= 3.15.0.4 - Authenticated (Customer+) Stored Cross-Site Scripting
High
CVE-2026-57371
WPJAM Basic <= 7.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-57369
Themify Builder <= 7.7.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14819
Event Tickets <= 5.28.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2026-57372
WPJAM Basic <= 7.0 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-57383
JobSearch WP Job Board <= 3.2.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-14924
Tablesome <= 1.1.30 - Missing Authorization
Medium
CVE-2026-57375
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.18.4 - Missing Authorization
High
CVE-2026-57376
ElementInvader Addons for Elementor <= 1.4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57377
Product Addons and Product Options With Custom Fields – WowAddons <= 1.6.8 - Missing Authorization
Medium
CVE-2026-57378
Advanced Forms for ACF <= 1.9.3.7 - Missing Authorization
Medium
CVE-2026-14926
FluentCart <= 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Subscription Payment Tampering
High
CVE-2026-57380
Extensions for Leaflet Map <= 5.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-57364
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More <= 2.2.0 - Unauthenticated Business Logic Flaw
Medium
CVE-2026-14821
Quiz And Survey Master <= 11.1.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.