High
CVE-2025-13192
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2025-68853
Contact Manager <= 9.1 - Unauthenticated PHP Object Injection
High
CVE-2025-69372
SevenHills <= 1.6.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22657
Atarim <= 4.0.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2026-25019
Atarim <= 4.3.1 - Missing Authorization
High
CVE-2025-69371
KindlyCare <= 1.6.1 - Unauthenticated PHP Object Injection
High
CVE-2025-69370
Capella <= 2.5.5 - Unauthenticated PHP Object Injection
Medium
CVE-2026-25015
UsersWP <= 1.2.53 - Cross-Site Request Forgery
Medium
CVE-2025-8072
Target Video Easy Publish <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter
High
CVE-2025-69301
PhotoMe <= 5.6.11 - Unauthenticated PHP Object Injection
High
CVE-2025-68531
ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-25316
CartFlows – Checkout & Funnel Builder for WooCommerce <= 2.1.19 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2026-24377
Nexter Blocks <= 4.6.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-1076
Star Review Manager <= 1.2.2 - Cross-Site Request Forgery to Settings Update
High
CVE-2025-69294
PeakShops <= 1.5.9 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-68047
Eventin <= 4.1.3 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-1235
eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
High
CVE-2026-0726
Nexter Extension – Site Enhancements Toolkit <= 4.4.6 - Unauthenticated PHP Object Injection via 'nxt_unserialize_replace'
Medium
CVE-2025-15043
The Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Control
Critical
CVE-2025-15403
RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order
High
CVE-2025-69099
North <= 5.7.5 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-68903
Anona <= 8.0 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-68899
Vivagh <= 2.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-67619
Kids Heaven <= 3.2 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.