Hoch
CVE-2025-67936
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.456
Filter zurücksetzen
Mittel
CVE-2025-69346
AffiliateX <= 1.3.9.3 - Missing Authorization
Mittel
CVE-2025-69092
Essential Addons for Elementor <= 6.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-67932
Listeo Core < 2.0.19 - Reflected Cross-Site Scripting
Mittel
CVE-2026-24634
Ultimate Reviews <= 3.2.16 - Unauthenticated Insecure Direct Object Reference
Mittel
CVE-2026-22482
IMGspider <= 2.3.12 - Authenticated (Contributor+) Server-Side Request Forgery
Mittel
CVE-2026-22470
FireStorm Professional Real Estate <= 2.7.11 - Authenticated (Administrator+) SQL Injection
Mittel
CVE-2025-13471
User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update
Hoch
CVE-2024-49249
SMSA Shipping <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Mittel
CVE-2025-67931
BulletProof Security <= 6.9 - Unauthenticated Sensitive Information Exposure
Mittel
CVE-2026-22481
BD Courier Order Ratio Checker <= 2.0.1 - Missing Authorization
Mittel
CVE-2026-27328
EduBlink <= 2.0.7 - Missing Authorization
Mittel
CVE-2025-69348
The Events Calendar Countdown Addon <= 1.4.15 - Missing Authorization
Hoch
CVE-2025-67935
Optimize < 2.4 - Unauthenticated Local File Inclusion
Mittel
CVE-2025-14552
MediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode
Mittel
CVE-2025-9637
Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
Mittel
CVE-2025-9318
Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
Mittel
CVE-2025-5919
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
Mittel
CVE-2025-9294
Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion
Mittel
CVE-2025-13964
LearnPress – WordPress LMS Plugin <= 4.3.2 - Missing Authentication to Unauthenticated Course Modification
Mittel
CVE-2025-13766
MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.6 Missing Authorization to Authenticated (Subscriber+) Posts and Media Creation, Modification and Deletion
Mittel
CVE-2025-14371
TaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag Modification
Mittel
CVE-2025-12067
Table Field Add-on for ACF and SCF <= 1.3.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content
Mittel
CVE-2025-13812
GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.