Medium
CVE-2025-66085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-64204
SmartMag <= 10.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-66112
Accessibility Toolkit by WebYes <= 2.0.4 - Missing Authorization
Medium
CVE-2025-12502
Attention Bar <= 0.7.2.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-64364
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-12521
Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
Medium
CVE-2025-66097
I Order Terms <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2025-64362
K Elements < 5.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-64363
Kleo < 5.5.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-64208
Jannah - Extensions <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64382
Order Export & Order Import for WooCommerce <= 2.6.7 - Missing Authorization
Medium
CVE-2025-66089
Product Feed for WooCommerce <= 2.3.1 - Missing Authorization
Medium
CVE-2025-11632
Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Medium
CVE-2025-49341
PDF Creator Lite <= 1.2 - Cross-Site Request Forgery
High
CVE-2025-64207
Jannah <= 7.6.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-6324
Easy Invoice <= 2.0.9 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-64206
Jannah <= 7.6.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-10008
Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion
High
CVE-2025-62076
Simple Payment <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-67561
Debug Log Viewer <= 2.0.3 - Missing Authorization
Medium
CVE-2025-57931
Popup box <= 5.5.4 - Cross-Site Request Forgery
Medium
CVE-2025-64296
Facebook for WooCommerce <= 3.5.7 - Missing Authorization to Unauthenticated Notification Dismissal
Medium
CVE-2025-11881
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Critical
CVE-2025-12057
WavePlayer <= 3.7.0 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.