Critical
CVE-2025-67963
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-69180
Ultra Portfolio <= 6.7 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-68027
Hydra Booking <= 1.1.32 - Unauthenticated Privilege Escalation
High
CVE-2025-68857
Paid Downloads <= 3.15 - Unauthenticated SQL Injection
High
CVE-2025-67966
Lawyer Directory <= 1.3.3 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-67960
WorkScout-Core <= 1.7.06 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-69319
Beaver Builder <= 2.9.4.1 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2026-1235
eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-24564
Textmetrics <= 3.6.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-68039
BackItUp <= 2.1.0 - Missing Authorization
Medium
CVE-2025-67956
User Registration <= 4.4.6 - Missing Authorization
Medium
CVE-2026-24990
WP Docs <= 2.2.8 - Missing Authorization
High
CVE-2025-69318
JobWP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-24565
B Accordion <= 2.0.2 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-68035
Tabby Checkout <= 5.8.4 - Unauthenticated Information Exposure
Medium
CVE-2026-24572
Nelio Content <= 4.2.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-67959
WorkScout <= 4.1.07 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-25310
Extend Link <= 2.0.0 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-24566
iNET Webkit <= 1.2.4 - Missing Authorization
High
CVE-2025-67955
MyHome Core <= 4.1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24568
Travel <= 11.1.0 - Missing Authorization
Medium
CVE-2026-24571
BOX NOW Delivery <= 3.0.2 - Missing Authorization
Critical
CVE-2025-15521
Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2026-0690
FlatPM – Ad Manager, AdSense and Custom Code <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Post Meta
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.