High
CVE-2025-69154
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2026-57672
wpDataTables (Premium) <= 6.5.1.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-57674
Timetics – Appointment Booking Calendar & Scheduling System <= 1.0.58 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-69156
Kids Zone - Children WordPress <= 5.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-8082
Bpost Shipping Platform <= 3.2.2 - Unauthenticated SQL Injection
High
CVE-2026-8141
Ajax Load More - Filters <= 3.4.1 - Unauthenticated Stored Cross-Site Scripting via 'taxonomy_include_children' Field
Unrated
pysec-2026-580
Malicious code in coolbox (PyPI)
Critical
CVE-2026-9711
EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter
Unrated
pysec-2026-579
Malicious code in cmd2func (PyPI)
Unrated
pysec-2026-578
Malicious code in bramin (PyPI)
Unrated
pysec-2026-586
Malicious code in tlask (PyPI)
High
CVE-2026-12240
Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field
Medium
CVE-2026-48717
OpenAM OAuth Authorization Bypass via PKCE Challenge
High
CVE-2026-47426
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
High
CVE-2026-47424
OpenAM Authenticated RCE via Groovy Sandbox Escape
Unrated
pysec-2026-584
Malicious code in rlask (PyPI)
Critical
CVE-2026-12073
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
Unrated
pysec-2026-583
Malicious code in nhmpy (PyPI)
Medium
CVE-2026-12560
Editorial Rating <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Link URL' Field
Medium
CVE-2026-12349
Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and 'remove_custom_sidebar' AJAX actions
Medium
CVE-2026-11367
PixMagix <= 1.7.2 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter
Medium
CVE-2026-8944
Plugin for Google Analytics by IO technologies <= 1.1 - Cross-Site Request Forgery via 'ga_id' Parameter
Unrated
pysec-2026-582
Malicious code in mflux-streamlit (PyPI)
Unrated
pysec-2026-585
Malicious code in spateo-release (PyPI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.