Mittel
CVE-2025-67956
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 8.950
Filter zurücksetzen
Hoch
CVE-2025-67955
MyHome Core <= 4.1.0 - Unauthenticated Local File Inclusion
Kritisch
CVE-2025-15521
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover
Hoch
CVE-2026-0726
Nexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace'
Mittel
CVE-2026-0554
NotificationX <= 3.1.11 - Missing Authorization to Authenticated (Contributor+) Analytics Reset
Hoch
CVE-2025-15347
Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update
Hoch
CVE-2025-67945
MailerLite – WooCommerce integration <= 3.1.2 - Unauthenticated SQL Injection
Mittel
CVE-2026-24579
Ai Image Alt Text Generator for WP <= 1.1.9 - Missing Authorization
Hoch
CVE-2025-67946
AdForest <= 6.0.11 - Unauthenticated Local File Inclusion
Kritisch
CVE-2025-14533
Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action
Mittel
CVE-2025-14348
weMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure
Hoch
CVE-2025-14977
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure
Mittel
CVE-2026-1051
Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription
Hoch
CVE-2025-69314
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Mittel
CVE-2025-69300
Premium Addons for Elementor <= 4.11.63 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Mittel
CVE-2025-14078
PAYGENT for WooCommerce <= 2.4.6 - Missing Authorization to Unauthenticated Payment Callback Manipulation
Mittel
CVE-2025-13725
Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter
Mittel
CVE-2025-14463
Payment Button for PayPal <= 1.2.3.41 - Missing Authorization to Unauthenticated Arbitrary Order Creation
Mittel
CVE-2026-0820
RepairBuddy <= 4.1116 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Signature Upload to Orders
Mittel
CVE-2025-14632
Filr – Secure document library <= 1.2.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via HTML Upload
Mittel
CVE-2025-12002
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal
Mittel
CVE-2025-14075
WP Hotel Booking <= 2.2.7 - Unauthenticated Sensitive Information Exposure via 'email' Parameter
Mittel
CVE-2025-12718
Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay
Hoch
CVE-2025-15491
Post Slides <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.