Medium
CVE-2026-28130
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-32420
GamiPress <= 7.6.6 - Cross-Site Request Forgery
Medium
CVE-2024-10938
OVRI Payment 1.7.0 - Malicious .htaccess directive
Medium
CVE-2026-28137
MediCenter - Health Medical Clinic WordPress Theme <= 14.9 - Reflected Cross-Site Scripting
Medium
CVE-2026-28112
AllInOne - Banner Rotator <= 3.8 - Reflected Cross-Site Scripting
High
CVE-2026-28129
Little Birdies | Multipurpose Children PSD Template <= 1.3.16 - Unauthenticated Local File Inclusion
Medium
CVE-2026-28108
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Reflected Cross-Site Scripting
Medium
CVE-2026-39696
Elfsight WhatsApp Chat CC <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-28122
ListingPro Plugin <= 2.9.8 - Reflected Cross-Site Scripting
Critical
CVE-2026-27804
Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter
Medium
CVE-2026-27795
LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
Critical
CVE-2026-27739
Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline
Medium
CVE-2026-27738
Angular SSR has an Open Redirect via X-Forwarded-Prefix
High
CVE-2026-27606
Rollup 4 has Arbitrary File Write via Path Traversal
Critical
CVE-2026-27699
Basic FTP has Path Traversal Vulnerability in its downloadToDir() method
Medium
CVE-2026-27729
Astro has memory exhaustion DoS due to missing request body size limit in Server Actions
High
CVE-2026-27578
n8n Vulnerable to Stored XSS via Various Nodes
Critical
CVE-2026-27577
n8n: Expression Sandbox Escape Leads to RCE
Critical
CVE-2026-27498
n8n has Arbitrary Command Execution via File Write and Git Operations
Critical
CVE-2026-27497
n8n has Potential Remote Code Execution via Merge Node
Critical
CVE-2026-27495
n8n has a Sandbox Escape in its JavaScript Task Runner
High
CVE-2026-27494
n8n has Arbitrary File Read via Python Code Node Sandbox Escape
Critical
CVE-2026-27493
n8n has Unauthenticated Expression Evaluation via Form Node
High
CVE-2026-3105
Mautic is Vulnerable to SQL Injection through Contact Activity API Sorting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.