Medium
CVE-2025-69013
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-68537
Zota <= 1.3.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-69014
Youzify <= 1.3.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-69015
Crowdsignal Forms <= 1.7.2 - Missing Authorization
Medium
CVE-2025-69017
RestroPress <= 3.2.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68513
Bold Timeline Lite <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69012
Event Organiser <= 3.12.8 - Missing Authorization
Critical
CVE-2025-68860
Mobile builder <= 1.4.2 - Authentication Bypass
Medium
CVE-2025-69011
Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69008
Inboxify Sign Up Form <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-69010
Themebeez Toolkit <= 1.3.5 - Missing Authorization
Medium
CVE-2025-68519
Brands for WooCommerce <= 3.8.6.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-68877
CedCommerce Integration for Good Market <= 1.0.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69009
Medical Equipment eCommerce WordPress Theme <= 1.0.9 - Missing Authorization
Medium
CVE-2025-68876
Invelity SPS connect <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-68006
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68878
Advanced Custom CSS <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-68036
CubeWP <= 1.1.27 - Missing Authorization
Medium
CVE-2025-69007
Popping Sidebars and Widgets Light <= 1.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-68998
Heateor Social Login <= 1.1.39 - Cross-Site Request Forgery
Medium
CVE-2025-68040
Project Manager <= 3.0.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69006
AM Events <= 1.13.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-14913
Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
High
CVE-2025-68897
IF AS Shortcode <= 1.2 - Authenticated (Contributor+) Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.