Medium
CVE-2025-69186
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-69293
Final User <= 1.2.5 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-24558
ABG Rich Pins <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69185
Hotel Listing <= 1.4.2 - Missing Authorization
Medium
CVE-2026-0914
WP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode
Medium
CVE-2025-69189
JobBank <= 1.2.3 - Missing Authorization
Critical
CVE-2025-68869
LazyTasks <= 1.2.37 - Unauthenticated Privilege Escalation
Medium
CVE-2026-24555
ArtPlacer Widget <= 2.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68057
Hospital Doctor Directory <= 1.3.9 - Missing Authorization
Medium
CVE-2025-69187
Final User <= 1.2.5 - Missing Authorization
Medium
CVE-2026-24563
LifePress <= 2.2.1 - Missing Authorization
Medium
CVE-2025-68072
Easy Property Listings <= 3.5.20 - Missing Authorization
High
CVE-2025-69292
Membership <= 1.6.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-24560
Cloudinary <= 3.3.0 - Missing Authorization
High
CVE-2025-14866
Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment
Medium
CVE-2026-24553
Fraud Prevention For Woocommerce <= 2.3.2 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2026-0920
LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter
Medium
CVE-2026-1036
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.36 - Missing Authorization to Unauthenticated Arbitrary Comment Deletion
High
CVE-2025-67957
Listivo Core <= 2.3.77 - Unauthenticated Local File Inclusion
Low
CVE-2025-67954
Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure
High
CVE-2026-22338
EcoBlue <= 1.15 - Unauthenticated Local File Inclusion
High
CVE-2025-67968
Real Homes CRM <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-67958
TaxCloud for WooCommerce <= 8.3.8 - Missing Authorization
High
CVE-2025-68866
Dinatur <= 1.18 - Unauthenticated Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.