Medium
CVE-2025-14865
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2026-1056
Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal
Medium
CVE-2025-68895
AhaChat Messenger Marketing <= 1.1 - Authentication Bypass
High
CVE-2025-68844
Membee Login <= 2.3.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-67975
aDirectory <= 3.0.3 - Missing Authorization
Medium
CVE-2025-69297
Aardvark <= 2.19 - Missing Authorization
Medium
CVE-2025-69323
Slimstat Analytics <= 5.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-69296
Aardvark <= 4.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-68842
Widget Logic Visual <= 1.52 - Reflected Cross-Site Scripting
High
CVE-2026-22340
WPJobster <= 6.3.5 - Unauthenticated SQL Injection
Medium
CVE-2025-14971
Link Invoice Payment for WooCommerce <= 2.8.0 - Missing Authorization to Unauthenticated Arbitrary Partial Payment Creation/Cancellation
Medium
CVE-2025-67970
Schedula <= 1.0 - Missing Authorization
Medium
CVE-2026-24530
WebP Conversion <= 2.1 - Missing Authorization
Medium
CVE-2026-24521
Kama Thumbnail <= 3.5.1 - Cross-Site Request Forgery
Medium
CVE-2026-24525
CLP Varnish Cache <= 1.0.2 - Missing Authorization
Medium
CVE-2026-25316
CartFlows – Checkout & Funnel Builder for WooCommerce <= 2.1.19 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2026-24524
Tablesome <= 1.2.8 - Missing Authorization
Medium
CVE-2026-24529
Quick Restaurant Reservations <= 1.6.7 - Missing Authorization
Medium
CVE-2026-24389
Gallery PhotoBlocks <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24522
Subscribe <= 1.2.16 - Missing Authorization
Medium
CVE-2026-25318
WiserReview Product Reviews for WooCommerce <= 2.9 - Missing Authorization
Medium
CVE-2026-24528
Nova Blocks <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-25315
hCaptcha for WP <= 4.22.0 - Missing Authorization
Medium
CVE-2026-24377
Nexter Blocks <= 4.6.3 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.