High
CVE-2025-13536
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-13381
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads
Medium
CVE-2025-66073
Webhooks <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2025-13597
AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-13595
CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-13389
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 14 - Missing Authorization to Unauthenticated Information Disclosure
Medium
CVE-2025-13414
Chamber Dashboard Business Directory <= 3.3.11 - Missing Authorization to Unauthenticated Business Information Export
Medium
CVE-2025-12586
Conditional Maintenance Mode for WordPress <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-13380
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read
Critical
CVE-2025-13559
EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation
High
CVE-2025-13526
OneClick Chat to Order <= 1.0.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-13317
Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
High
CVE-2025-13384
CP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation
Medium
CVE-2025-67598
SupportCandy <= 3.4.1 - Cross-Site Request Forgery
Medium
CVE-2025-66064
Giveaways and Contests by RafflePress <= 1.12.20 - Cross-Site Request Forgery
Medium
CVE-2025-11973
简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2025-13159
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
High
CVE-2025-11985
Realty Portal <= 0.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-11773
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update
Medium
CVE-2025-11771
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authentication to Unauthenticated Presale Update
Medium
CVE-2025-10938
UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-11003
UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-12746
Tainacan <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-11799
Affiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.