Medium
CVE-2026-8981
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2026-8071
CleanTalk Anti-Spam. Spam Firewall & Bot protection < 6.79 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-15609
Fortis for WooCommerce < 1.3.1 - Unauthenticated Information Exposure
Medium
CVE-2026-11965
User Registration & Membership <= 5.1.0 - Unauthenticated Payment Bypass
Medium
CVE-2026-9060
Store Locator WordPress < 1.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2026-6381
WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters < 4.9.3 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2026-6495
Ajax Load More – Infinite Scroll, Load More, & Lazy Load < 7.8.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-10077
YOOtheme Pro <= 5.0.34 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2026-48063
Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload
Medium
CVE-2026-53698
Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set
Unrated
CVE-2026-11915
drupal/bfap_sb - SA-CONTRIB-2026-047
Unrated
CVE-2026-11914
drupal/composer - SA-CONTRIB-2026-046
Unrated
CVE-2026-11913
drupal/mothermayi - SA-CONTRIB-2026-045
Unrated
CVE-2026-11909
drupal/examples - SA-CONTRIB-2026-044
Unrated
CVE-2026-11908
drupal/tagify - SA-CONTRIB-2026-043
High
CVE-2025-53114
Acknowledgement extension out of memory
Critical
CVE-2026-10795
UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 (free) < 2.26.5 (premium) - Unauthenticated Authentication Bypass via UpdraftCentral udrpc
Medium
CVE-2026-53438
Jenkins: Missing permission check allows unauthorized cancellation of queue items
Medium
CVE-2026-53442
Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations
Medium
CVE-2026-53437
Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL
Medium
CVE-2026-53436
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Medium
CVE-2026-53439
Jenkins exposes other users' timezone and view names to users with Overall/Read permission
High
CVE-2026-53435
Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation
Medium
CVE-2026-53440
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.