Medium
CVE-2025-26577
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
Medium
CVE-2025-26574
Google Drive WP Media <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26572
WP PHPList <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26547
My Login Logout Plugin <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26538
Prezi Embedder <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26543
Simple Responsive Menu <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26567
Font Awesome WP <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26561
Elfsight Yottie Lite <= 1.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-26578
Simple Documentation <= 1.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26582
TinyMCE Advanced qTranslate fix editor problems <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26552
Naver Syndication V2 <= 0.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-26549
WP Html Page Sitemap <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26545
Related Posts Line-up-Exactly by Milliard <= 0.0.22 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26539
Embed Google Map <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
ghsa-c2p2-hgjg-9r3f
Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header
Critical
ghsa-vjh7-7g9h-fjfh
Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)
High
CVE-2025-25283
parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
Medium
CVE-2024-13639
Read More & Accordion <= 3.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary 'Read More' Post Deletion
Critical
CVE-2025-25200
Inefficient Regular Expression Complexity in koa
High
CVE-2025-0924
WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13227
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
Medium
CVE-2024-13229
Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion
High
CVE-2024-13770
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10322
Brizy – Page Builder <= 2.6.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.