High
CVE-2025-69366
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2026-25418
Bit Form <= 2.21.10 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-69307
Medinik Core <= 1.3.6 - Unauthenticated SQL Injection
High
CVE-2025-69306
Electio Core <= 1.4 - Unauthenticated SQL Injection
High
CVE-2025-69310
Woodly Core <= 1.4 - Unauthenticated SQL Injection
Medium
CVE-2025-67987
Quiz And Survey Master <= 10.3.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-69308
Nestbyte Core <= 1.2 - Unauthenticated SQL Injection
High
CVE-2025-14386
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization 2.4.4 - 2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover
Medium
CVE-2025-68855
JobBoard Job listing <= 1.2.8 - Unauthenticated Information Exposure
High
CVE-2025-69304
Allmart <= 1.1 - Unauthenticated SQL Injection
High
CVE-2026-0702
VidShop – Shoppable Videos for WooCommerce <= 1.1.4 - Unauthenticated Time-Based SQL Injection via 'fields'
High
CVE-2025-69305
Crete Core <= 1.4.3 - Unauthenticated SQL Injection
Medium
CVE-2025-14973
Recipe Card Blocks for Gutenberg & Elementor < 3.4.13 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-22340
WPJobster <= 6.3.5 - Unauthenticated SQL Injection
Medium
CVE-2026-24377
Nexter Blocks <= 4.6.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-24523
FullCalendar <= 1.6 - Unauthenticated Information Exposure
Medium
CVE-2026-24998
Hustle <= 7.8.9.2 - Unauthenticated Information Exposure
Medium
CVE-2026-24536
Webpushr <= 4.38.0 - Unauthenticated Information Exposure
Medium
CVE-2025-6461
CubeWP – All-in-One Dynamic Content Framework <= 1.1.27 - Unauthenticated Post Disclosure in class-cubewp-search-ajax-hooks.php
Medium
CVE-2025-13920
WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action
Medium
CVE-2026-0806
WP-ClanWars <= 2.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Medium
CVE-2025-14609
Wise Analytics <= 1.1.9 - Missing Authorization to Unauthenticated Arbitrary Analytics Database Disclosure via 'name' Parameter
Medium
CVE-2025-15520
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68999
Happy Addons for Elementor <= 3.20.4 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.