High
CVE-2025-15266
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-15020
Gotham Block Extra Light <= 1.5.0 - Authenticated (Contributor+) Arbitrary File Read via 'ghostban' Shortcode
Medium
CVE-2026-0717
LottieFiles – Lottie block for Gutenberg <= 3.0.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-14464
PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials
Medium
CVE-2025-14854
WP-CRM System – Manage Clients and Projects <= 3.4.5 - Missing Authorization to Authenticated (Subscriber+) CRM Data Exposure and Task Modification
High
CVE-2025-68913
Miion <= 1.2.7 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-68905
JNews - Pay Writer <= 11.0.0 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-68903
Anona <= 8.0 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-68899
Vivagh <= 2.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-69004
Bajaar - Highly Customizable WooCommerce WordPress <= 2.1.0 - Unauthenticated Local File Inclusion
High
CVE-2026-24609
Laurent <= 3.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67619
Kids Heaven <= 3.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-68902
Anona <= 8.0 - Unauthenticated Arbitrary File Download
High
CVE-2026-24608
Laurent Core <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-22328
Auto Repair <= 22.6 - Reflected Cross-Site Scripting
High
CVE-2025-69002
OneLife <= 3.9 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-69005
Search & Go <= 2.8 - Unauthenticated Local File Inclusion
High
CVE-2026-27052
Sales Countdown Timer for WooCommerce and WordPress <= 1.1.8.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68908
Barberry <= 2.9.9.87 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69362
UiChemy <= 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2026-22331
AutoParts <= 1.5.8 - Unauthenticated Local File Inclusion
High
CVE-2026-22325
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22324
Melania <= 2.5.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-14507
EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.