Web Application

🛡 Related vulnerabilities 283

	ID	Title	Severity	Detected
	CVE-2026-10073	Vulnerability in path-traversal (CVE-2026-10073)	High	3 months ago
	CVE-2026-4776	Mautic has SQL Injection in API Contact Filtering	High	3 months ago
	CVE-2025-11262	The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...	High	3 months ago
	CVE-2026-42760	Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and...	High	3 months ago
	CVE-2026-42762	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...	High	3 months ago
	CVE-2026-42746	Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for...	High	3 months ago
	CVE-2026-42753	Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows...	High	3 months ago
	CVE-2026-42735	Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...	High	3 months ago
	CVE-2026-42736	Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...	High	3 months ago
	CVE-2026-42737	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...	High	3 months ago
	CVE-2026-42745	Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...	High	3 months ago
	CVE-2026-42730	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...	High	3 months ago
	CVE-2026-2253	Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0,...	High	3 months ago
	CVE-2026-5260	A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret...	High	3 months ago
	CVE-2026-9584	A security vulnerability has been detected in code-projects Project Management System 1.0....	High	3 months ago
	CVE-2026-42013	A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name ...	High	3 months ago
	CVE-2026-27891	FacturaScripts is an open source accounting and invoicing software. Versions 2026 and below contain a critical vulnerability in the Plugins::add() function. The system fails to properly validate the f...	High	3 months ago
	CVE-2026-46367	Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering	High	3 months ago
	CVE-2026-46359	phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields	High	3 months ago
	CVE-2026-46366	phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query	High	3 months ago
	CVE-2021-47966	PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in...	High	3 months ago
	CVE-2021-47959	WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows...	High	3 months ago
	CVE-2021-47963	Anote 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to...	High	3 months ago
	CVE-2026-4094	The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to...	High	3 months ago
	CVE-2026-46445	SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.	High	3 months ago
	CVE-2026-46446	SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored,...	High	3 months ago
	CVE-2026-8321	A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function...	High	3 months ago
	CVE-2026-45223	Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user...	High	3 months ago
	CVE-2026-45224	Crabbox contains a path traversal vulnerability in the Islo provider's workspace path resolution	High	3 months ago
	CVE-2026-44313	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44313)	Critical	3 months ago