CWE-26
CVEs classified under CWE-26, newest first.
3 CVEsRSS
CVE-2026-112904High· 8.7Vvveb: Path Traversal in nextRestore() and nextBackup()
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file GET parameter and …
▾ Twilightgivanz · VvvebEPSS 0.34%via CVEORG
CVE-2026-15896Critical· 9.1The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function. This makes it possible for unauthenticated attackers to re…
▾ MidnightWebRehab · Super Forms – Drag & Drop Form BuilderEPSS 0.88%via NVD
CVE-2026-42196Criticaldjango-s3file is vulnerable to relative path traversal
django-s3file is vulnerable to relative path traversal
▾ Midnightdjango-s3file · django-s3fileEPSS 0.56%via OSV