Medium
CVE-2025-14149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-14040
Automotive Car Dealership Business WordPress Theme <= 13.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call to Action Fields
Critical
CVE-2025-12981
Listee <= 1.1.6 - Unauthenticated Privilege Escalation
Medium
CVE-2026-1558
WP Recipe Maker <= 10.3.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Metadata Modification via 'recipeId' Parameter
High
CVE-2026-2428
Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification
High
CVE-2026-1565
User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2026-28126
RH Frontend Publishing Pro < 4.3.4 - Reflected Cross-Site Scripting
Medium
e5b98a2c-faed-4e2b-8b94-31e2be95ad40
WPZOOM Addons for Elementor – Starter Templates & Widgets <= 1.3.4 - Unauthenticated Reflected Cross-Site Scripting via 'title_tag' Parameter
High
CVE-2026-28123
Veil - Wedding & Photographer WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-28113
Ultimate Learning Pro <= 3.9.1 - Reflected Cross-Site Scripting
High
CVE-2026-28121
Anderson <= 1.4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-32418
Meow Gallery <= 5.4.4 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-39694
Simply Schedule Appointments <= 1.6.11.0 - Missing Authorization
High
CVE-2026-28114
WooCommerce License Manager <= 7.0.6 - Authenticated (Shop Manager+) Arbitrary File Upload
Medium
CVE-2026-28135
Royal Addons for Elementor – Addons and Templates Kit for Elementor <= 1.7.1052 - Missing Authorization
Medium
CVE-2026-28103
Responsive Zoom In/Out Slider WordPress Plugin <= 5.4.5 - Reflected Cross-Site Scripting
High
CVE-2026-28119
Nirvana <= 2.6 - Unauthenticated Local File Inclusion
High
CVE-2026-28120
Dr.Patterson <= 1.3.2 - Unauthenticated Local File Inclusion
High
CVE-2026-28124
Notarius - Legal Advisor WordPress Theme <= 1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-28104
Site Suggest <= 1.3.9 - Missing Authorization
Medium
CVE-2026-28078
Directory Listings WordPress plugin – uListing <= 2.2.0 - Authenticated (Editor+) Arbitrary File Download
High
CVE-2026-28125
Midi - Sound & Music WordPress Theme <= 1.14 - Unauthenticated Local File Inclusion
High
CVE-2026-28134
JetEngine <= 3.7.2 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-28107
Muzicon <= 1.9.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.