High
CVE-2025-68068
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-62066
Revolution < 2.5.8 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-62065
RTMKit <= 1.6.5 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2025-68077
Stockholm <= 9.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-68067
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-62969
NextMove Lite <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62967
DirectoryPress <= 3.6.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64194
Eduma <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62968
WP Last Modified Info <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-64195
Eduma <= 5.7.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-62067
Savory <= 2.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-64380
Booster for WooCommerce <= 7.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62970
Link Whisper Free <= 0.9.2 - Missing Authorization
Medium
CVE-2025-63050
REHub Framework < 19.9.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68076
Stockholm Core <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-9890
Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2025-11256
Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing
Medium
CVE-2025-10750
PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-11372
LearnPress – WordPress LMS Plugin <= 4.2.9.3 - Missing Authorization to Unauthenticated Database Table Manipulation
Medium
CVE-2025-11741
WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
Medium
CVE-2025-11510
FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset
Medium
CVE-2025-10006
WPBakery Page Builder <= 8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-11691
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection
An unauthenticated SQL injection vulnerability in PPOM for WooCommerce allows attackers to extract sensitive database information when Legacy Price Calculations are enabled.
Critical
CVE-2025-11391
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload
A vulnerability in PPOM – Product Addons & Custom Fields for WooCommerce allows unauthenticated attackers to upload arbitrary files via the image cropper, potentially enabling remote code execution on sites with the paid version active.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.