High
CVE-2025-68017
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-67941
The Aisle < 2.9.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-0691
CM E-Mail Blacklist <= 1.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'black_email' Parameter
High
CVE-2025-67940
Powerlift < 3.2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68008
Mail <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-14375
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.10 - Reflected Cross-Site Scripting via className
Medium
CVE-2025-14853
LEAV Last Email Address Validator <= 1.7.1 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2026-0939
Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation
Medium
CVE-2025-14384
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure
Medium
CVE-2025-14982
Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2025-12641
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.6 - Missing Authorization to Unauthenticated Role Demotion
Medium
CVE-2025-12895
Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request
Medium
CVE-2026-22334
Woocommerce Book Price <= 1.3 - Authenticated (Subscriber++) Arbitrary File Download
Medium
CVE-2025-69102
Test Email <= 1.1.7 - Reflected Cross-Site Scripting
High
CVE-2025-67938
Biagiotti < 3.5.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69099
North <= 5.7.5 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-69100
North <= 5.7.5 - Unauthenticated Local File Inclusion
Medium
CVE-2026-1003
GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion
Medium
CVE-2026-24596
Related Posts Thumbnails Plugin for WordPress <= 4.3.2 - Cross-Site Request Forgery
High
CVE-2026-40721
Element Pack Pro <= 9.0.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-15513
Float Payment Gateway <= 1.1.9 - Improper Authorization to Unauthenticated Order Status Manipulation
Medium
CVE-2025-15475
PayHere Payment Gateway Plugin for WooCommerce <= 2.3.9 - Missing Authorization to Unauthenticated Order Status Modification
Critical
CVE-2025-14502
News and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-14301
Integration Opvius AI for WooCommerce <= 1.3.0 - Unauthenticated Arbitrary File Deletion/Read via Path Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.