High
CVE-2026-53843
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,583
High
CVE-2026-53864
OpenClaw: Host environment sanitizer missed two Node.js control variables
High
CVE-2026-55746
Cotonti: Stored Cross-Site Scripting in the Personal File Storage (PFS) module
Medium
CVE-2026-55745
Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module
High
CVE-2026-55744
Cotonti: Cross-Site Request Forgery in the Personal File Storage (PFS) module
Critical
CVE-2026-55742
Cotonti: Cross-Site Request Forgery in the administration rights handler
Medium
CVE-2026-54838
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.8 - Authenticated (Subscriber+) SQL Injection
High
CVE-2026-12516
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-12270
Everest Forms <= 3.4.0 - Unauthenticated Missing Authorization
Medium
CVE-2026-54837
Intranet & Private Site – All-In-One Intranet <= 1.8.1 - Missing Authorization
High
CVE-2026-54845
MDTF – Meta Data and Taxonomies Filter <= 1.3.8 - Unauthenticated Local File Inclusion
Medium
CVE-2026-54842
Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini <= 1.4.25 - Missing Authorization
Medium
CVE-2026-54840
Newsletters <= 4.13 - Missing Authorization
High
CVE-2026-12517
Fediverse Embeds <= 1.5.7 - Unauthenticated Server-Side Request Forgery
High
CVE-2026-54849
Premmerce Wishlist for WooCommerce <= 1.1.11 - Unauthenticated SQL Injection
Medium
CVE-2026-56009
Bricksable for Bricks Builder <= 1.6.83 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-54839
Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups <= 2.0.9 - Unauthenticated Information Exposure
Medium
CVE-2026-11875
Support Plus Responsive Ticket System <= 9.1.2 - Insecure Direct Object Reference to Unauthenticated Support Ticket Access
Medium
CVE-2026-54841
Vitepos – Point of Sale (POS) for WooCommerce <= 3.4.2 - Unauthenticated Information Exposure
High
CVE-2026-54843
MDTF – Meta Data and Taxonomies Filter <= 1.3.7 - Unauthenticated SQL Injection
Medium
CVE-2026-54847
Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator <= 8.3.9 - Missing Authorization
High
CVE-2026-56008
Avada (Fusion) Builder <= 3.15.4 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2026-56006
Interactive Content – H5P <= 1.17.6 - Reflected Cross-Site Scripting
High
CVE-2026-54836
YMC Filter <= 3.11.5 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.