Unrated
CVE-2026-0945
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Unrated
CVE-2026-0944
drupal/ginvite - SA-CONTRIB-2026-001
Medium
CVE-2025-14448
WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields
High
CVE-2026-23498
Shopware Has Improper Control of Generation of Code in Twig rendered views
High
CVE-2026-22787
html2pdf.js contains a cross-site scripting vulnerability
Critical
CVE-2026-22686
enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain
Medium
CVE-2025-66169
Apache Camel camel-neo4j component is vulnerable to cypher injection
High
CVE-2025-12166
Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters
Medium
CVE-2026-24603
Universal Google Adsense and Ads manager <= 1.1.8 - Missing Authorization
Medium
CVE-2026-24604
Simple GDPR Cookie Compliance <= 2.0.0 - Missing Authorization
Medium
CVE-2026-24605
X Addons for Elementor <= 1.0.23 - Missing Authorization
Medium
CVE-2022-50807
Concrete5 CMS contains an XPath injection vulnerability
High
CVE-2026-40721
Element Pack Pro <= 9.0.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-24601
Penci Pay Writer <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24999
Alma <= 5.16.1 - Missing Authorization
Medium
CVE-2026-24600
Penci Review <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2026-23550
Modular DS <= 2.5.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-10915
Dreamer Blog <= 1.2 - Missing Authorization
Medium
CVE-2026-0859
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool
Medium
CVE-2026-22820
Outray cli is vulnerable to race conditions in tunnels creation
Medium
CVE-2026-22819
Outray has a Race Condition in the cli's webapp
High
CVE-2026-22818
Hono JWK Auth Middleware has JWT algorithm confusion when JWK lacks "alg" (untrusted header.alg fallback)
High
CVE-2026-22817
Hono JWT Middleware's JWT Algorithm Confusion via Unsafe Default (HS256) Allows Token Forgery and Auth Bypass
Low
CVE-2025-15056
Quill is vulnerable to XSS via HTML export feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.