High
CVE-2025-69380
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-67996
Nestin < 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-69382
Themesflat Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
High
CVE-2025-69383
shop <= 2.6.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69328
Booking and Rental Manager <= 2.5.9 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-25338
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.4 - Missing Authorization
High
CVE-2026-39611
KuteShop <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-1293
Yoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute
Medium
CVE-2026-1927
GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css
High
CVE-2026-23975
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-69375
Portfolio Builder <= 1.2.5 - Unauthenticated Local File Inclusion
High
CVE-2025-67988
CozyStay < 1.9.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69374
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-1246
ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
High
CVE-2025-67982
Urna <= 2.5.12 - Unauthenticated Local File Inclusion
High
CVE-2025-68841
TopperPack – Complete Elementor Addons, Theme & CPT Builder <= 1.2.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69373
VidoRev <= 2.9.9.9.9.9.7 - Unauthenticated Local File Inclusion
High
CVE-2025-68853
Contact Manager <= 9.1 - Unauthenticated PHP Object Injection
High
CVE-2025-67981
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
High
CVE-2026-25027
Unicamp <= 2.7.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67980
Hara <= 1.2.17 - Unauthenticated Local File Inclusion
High
CVE-2025-15368
SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2026-0679
Fortis for WooCommerce <= 1.2.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Update to Paid via 'wc-api' Endpoint
Medium
CVE-2025-15487
Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.