Mittel
CVE-2025-12827
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.670
Filter zurücksetzen
Hoch
CVE-2025-13088
Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Mittel
CVE-2025-12961
Download Panel <= 1.3.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification
Mittel
CVE-2025-12404
Like-it <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Mittel
CVE-2025-12962
Local Syndication <= 1.5a - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
Mittel
CVE-2025-12078
ArtiBot Free Chat Bot for WebSites <= 1.1.7 - Reflected Cross-Site Scripting via PostMessage
Hoch
CVE-2025-11620
Multiple Roles per User <= 1.0 - Missing Authorization to Authenticated (Custom+) Privilege Escalation
Mittel
CVE-2025-12372
The Permalinks Cascade <= 2.2 - Missing Authorization To Authenticated (Subscriber+) Plugin Settings Update
Hoch
CVE-2025-12775
WP Dropzone <= 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Mittel
CVE-2025-12823
CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-12173
WP Admin Microblog <= 3.1.1 - Cross-Site Request Forgery to Message Creation
Mittel
CVE-2025-12406
Project Honey Pot Spam Trap <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Hoch
CVE-2025-12411
Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Authenticated (Subscriber+) SQL Injection
Hoch
CVE-2025-12528
Pie Forms for WP <= 1.6 - Unauthenticated Arbitrary File Upload
Mittel
CVE-2025-8609
RTMKit Addons <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Repeater Block Attribute
Mittel
CVE-2025-11267
VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-11265
VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-12524
Post Type Switcher <= 4.0.0 - Insecure Direct Object Reference to Authenticated (Author+) Post Type Change
Hoch
CVE-2025-12974
Gravity Forms <= 2.9.21.1 - Unauthenticated Arbitrary File Upload via Legacy Chunked Upload
Mittel
CVE-2025-7711
Classified Listing – Classified ads & Business Directory Plugin <= 5.0.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Listing Description
Mittel
CVE-2025-66069
PPOM for WooCommerce <= 33.0.16 - Missing Authorization
Mittel
CVE-2025-66100
RestroPress <= 3.2.3.5 - Missing Authorization
Mittel
CVE-2025-67551
Wappointment <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Hoch
CVE-2025-12482
Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.