High
CVE-2025-69402
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-69398
Plank <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69396
Splendour <= 1.23 - Unauthenticated Local File Inclusion
High
CVE-2025-69407
Struktur <= 2.5.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69406
FreightCo <= 1.1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69410
Belletrist <= 1.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69408
HealthFirst <= 1.0.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69397
Tint <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-14541
Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter
High
CVE-2026-1560
Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-39613
Boutique <= 2.3.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68552
WooCommerce Coming Soon Product with Countdown <= 5.0 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-69387
Simple Retail Menus <= 4.2.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-69379
Upload Files Anywhere <= 2.8 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-67992
PatioTime < 2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24953
Simple File List <= 6.1.15 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2025-69380
Upload Files Anywhere <= 2.8 - Unauthenticated Arbitrary File Download
High
CVE-2025-69383
shop <= 2.6.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-0632
Fluent Forms Pro Add On Pack <= 6.1.12 - Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource'
High
CVE-2026-39611
KuteShop <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-1634
Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
High
CVE-2026-1499
WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action
Critical
CVE-2025-69376
User Extra Fields <= 17.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2026-23975
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.