Medium
CVE-2025-26751
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2025-26589
IE CSS3 Support <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22635
Eventer <= 3.9.8 - Reflected Cross-Site Scripting
High
CVE-2025-26763
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2025-26761
Easy Elementor Addons <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13879
Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2025-1033
Badgearoo <= 1.0.14 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-26760
Calculator Builder – Create an Online Calculator <= 1.6.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-26766
Leyka <= 3.31.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26767
Qubely <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-12562
s2Member Pro <= 241216 - Unauthenticated PHP Object Injection
Critical
CVE-2025-26776
Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-26588
TTT Crop <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-26752
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2024-13826
Email Keep <= 1.1 - Cross-Site Request Forgery to Email Deletion
Medium
CVE-2025-26775
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13439
Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-26755
WP Airbnb Review Slider <= 3.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-10581
DirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status Update
Medium
CVE-2025-26772
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26586
Events Planner <= 1.3.10 - Reflected Cross-Site Scripting
Medium
CVE-2025-26770
Waymark <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26750
Vitepos – Point of sale (POS) <= 3.1.3 - Missing Authorization
Medium
CVE-2025-22757
CodeBard Help Desk <= 1.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.