Medium
CVE-2026-44645
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2026-44644
LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS
Critical
CVE-2026-44632
Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
Medium
CVE-2026-44596
Yamcs has No Rate Limiting on Authentication Endpoint
Medium
CVE-2026-44595
Yamcs vulnerable to unauthorized user enumeration via IAM API endpoints
Medium
CVE-2026-49053
ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor <= 3.9.6 - Missing Authorization
High
CVE-2025-69166
Gunslinger <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69161
Snowy <= 1.13 - Unauthenticated Local File Inclusion
High
CVE-2025-69167
Eros <= 1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-8089
weMail <= 2.1.2 - Reflected Cross-Site Scripting
High
CVE-2025-69172
Resurs <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-69177
Roneous - Creative Multi-Purpose WordPress Theme <= 2.1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69173
Tipsy <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-48971
Product Import Export for WooCommerce – Import Export Product CSV Suite <= 2.5.6 - Missing Authorization
High
CVE-2025-69176
ITactics <= 1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-8682
3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint
Medium
CVE-2026-42736
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference
High
CVE-2025-69162
Grecko <= 5.17 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49047
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.4.29 - Missing Authorization
Medium
CVE-2026-49051
WP Meta and Date Remover <= 2.3.6 - Missing Authorization
Medium
b061facb-0411-4b81-adbd-b1419b7210df
Advanced Custom Fields (ACF®) <= 6.8.1 - Missing Authorization
Medium
CVE-2026-9570
Taskbuilder <= 5.0.7 - Reflected Cross-Site Scripting
High
CVE-2025-69170
Eventicity <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69157
Gamic <= 1.15 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.