Medium
CVE-2025-13794
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-12809
dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Medium
CVE-2026-1000
MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion
Medium
CVE-2025-13367
User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Medium
CVE-2025-12900
FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
Medium
CVE-2025-67999
Newsletter <= 9.0.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-67560
Listdom <= 5.0.1 - Missing Authorization
Medium
CVE-2025-64250
Directorist <= 8.6.6 - Unauthenticated Open Redirect
High
CVE-2025-67525
ekommart < 4.3.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67530
Besa <= 2.3.15 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67526
Sailing < 4.4.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-15526
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter
Medium
CVE-2025-67576
Simple Link Directory <= 8.8.3 - Missing Authorization
High
CVE-2025-67529
Fashion < 5.3.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67515
Wilmër < 3.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-67573
Sailing < 4.4.6 - Missing Authorization
Medium
CVE-2025-66115
Easy Invoice <= 2.1.4 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-67465
Simple Link Directory <= 8.8.3 - Cross-Site Request Forgery
High
CVE-2025-67532
Hara <= 1.2.17 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67528
Urna <= 2.5.12 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68061
EduMall <= 4.4.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67531
Turitor < 1.5.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67527
Digiqole < 2.2.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68062
MinimogWP <= 3.9.6 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.