Critical
CVE-2025-15030
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-67615
Myour <= 1.5.1 - Unauthenticated Local File Inclusion
High
CVE-2025-50004
JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-22330
Right Way <= 4.0 - Unauthenticated Local File Inclusion
High
CVE-2025-67617
Consult Aid <= 1.4.3 - Unauthenticated PHP Object Injection
High
CVE-2025-67616
Mella <= 1.2.29 - Unauthenticated Local File Inclusion
High
CVE-2026-22326
Reprizo <= 1.0.8 - Unauthenticated Local File Inclusion
Medium
CVE-2026-27055
Penci AI SmartContent Creator <= 2.0 - Missing Authorization
Medium
CVE-2026-24620
Landing Page Builder <= 1.5.3.4 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-69359
Creator LMS <= 1.1.12 - Missing Authorization
High
CVE-2025-69356
TheGem Theme Elements (for Elementor) <= 5.11.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-0831
Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write
Medium
CVE-2025-14976
User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2025-14943
Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-13717
Contact Form vCard Generator <= 2.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'wp-gvc-cf-download-id' Parameter
Medium
CVE-2025-14146
Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-14657
Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
Medium
CVE-2025-14980
BetterDocs <= 4.3.3 - Authenticated (Contributor+) Sensitive Information Exposure
Critical
CVE-2025-14736
Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field
Medium
CVE-2025-14720
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
Medium
CVE-2025-14574
weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-58913
VideoPro <= 2.3.8.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-14975
Custom Login Page Customizer <= 2.5.3 - Unauthenticated Privilege Escalation via Password Reset
Medium
CVE-2026-24353
User Registration <= 4.4.9 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.