High
CVE-2025-14554
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2026-25395
Business Roy <= 1.1.4 - Missing Authorization
Medium
CVE-2026-1165
Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change
Medium
CVE-2026-25393
Hello FSE <= 1.0.6 - Missing Authorization
Medium
CVE-2026-25019
Atarim <= 4.3.1 - Missing Authorization
Medium
CVE-2026-25392
Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress <= 1.4.1 - Unauthenticated Open Redirect
Medium
CVE-2025-68005
Easy Hotel Booking <= 1.8.4 - Missing Authorization
Critical
CVE-2026-22341
Booked <= 3.0.0 - Authentication Bypass
Medium
CVE-2026-25407
Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode <= 4.6.4 - Missing Authorization
Medium
CVE-2025-68042
Travelpayouts <= 1.2.3 - Missing Authorization
Medium
CVE-2026-25323
OSM – OpenStreetMap <= 6.1.12 - Missing Authorization
Medium
CVE-2026-25321
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Missing Authorization
High
CVE-2025-69371
KindlyCare <= 1.6.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-68854
ID Arrays <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-25402
Echo Knowledge Base – Documentation, FAQs, AI Chat & AI Search <= 16.011.0 - Missing Authorization
Medium
CVE-2025-67547
Konte <= 2.4.6 - Missing Authorization
Medium
CVE-2026-25404
WP Job Manager <= 2.4.0 - Missing Authorization
Medium
CVE-2026-25322
PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes <= 3.7.22 - Cross-Site Request Forgery
Medium
CVE-2026-25408
Broken Link Notifier <= 1.3.5 - Missing Authorization
Medium
CVE-2026-24368
The Grid < 2.8.0 - Missing Authorization
Medium
CVE-2026-24383
B Slider <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-25016
Nelio Popups <= 1.3.5 - Missing Authorization
Medium
CVE-2025-68051
Shiprocket <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2025-69368
SOHO - Photography WordPress <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.