High
CVE-2025-69002
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2025-50004
JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-67617
Consult Aid <= 1.4.3 - Unauthenticated PHP Object Injection
High
CVE-2025-13457
WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
Medium
CVE-2025-14118
Starred Review <= 1.4.2 - Reflected Cross-Site Scripting via PHP_SELF Variable
Medium
CVE-2025-14144
Mstoic Shortcodes <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start' Shortcode Attribute
Medium
CVE-2025-14802
LearnPress – WordPress LMS Plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion
Medium
CVE-2025-14441
Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion
Medium
CVE-2025-68044
Five Star Restaurant Reservations <= 2.7.4 - Unauthenticated Insecure Direct Object Reference
High
CVE-2025-69079
Sound | Musical Instruments Online Store <= 1.6.9 - Unauthenticated PHP Object Injection
High
CVE-2025-69075
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion
High
CVE-2025-69073
Piqes <= 1.0.11 - Unauthenticated Local File Inclusion
Medium
CVE-2025-59138
Genemy <= 1.6.6 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-67911
Newsletters <= 4.11 - Unauthenticated PHP Object Injection
High
CVE-2025-69035
Dental Care CPT <= 20.2 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-69036
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-69032
FiveStar <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-69026
PopupKit <= 2.1.5 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-24954
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-68601
Five Star Restaurant Reservations <= 2.7.8 - Cross-Site Request Forgery
Medium
CVE-2025-11496
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-14071
Live Composer – Free WordPress Website Builder <= 2.0.2 - Authenticated (Contributor+) PHP Object Injection via dslc_module_posts_output Shortcode
Medium
CVE-2025-13608
CC Child Pages <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'child_pages' Shortcode
High
CVE-2025-14002
WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.