Medium
CVE-2025-14984
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-13679
Tutor LMS <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_details
Medium
CVE-2025-12640
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement
Medium
CVE-2025-14275
Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Medium
CVE-2025-47500
Stackable <= 3.19.5 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2025-14431
Navian <= 1.5.4 - Unauthenticated Local File Inclusion
High
CVE-2026-22521
Handmade Framework <= 3.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-22707
Moody <= 2.7.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-27094
Page Builder Gutenberg Blocks – CoBlocks <= 3.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-22509
Atlas <= 2.1.0 - Unauthenticated Local File Inclusion
High
CVE-2025-12550
OchaHouse <= 2.2.8 - Unauthenticated Local File Inclusion
High
CVE-2025-14430
Brook <= 2.9.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-22489
Image Slider Slideshow <= 1.8 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2026-27092
WPAdverts – Classifieds Plugin <= 2.3.0 - Missing Authorization
Medium
CVE-2026-22518
X Addons for Elementor <= 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-22522
Block Slider <= 2.2.3 - Missing Authorization
Medium
CVE-2025-69093
ShopMagic <= 4.7.2 - Missing Authorization
Medium
CVE-2025-13504
Real Estate Pro <= 2.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2026-22490
Bulk Landing Page Creator for WordPress LPagery <= 2.4.9 - Missing Authorization
Medium
CVE-2025-69350
Accordion <= 3.0.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-69351
Ninja Tables <= 5.2.4 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-22712
Typify <= 3.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-14359
Oshine <= 7.2.7 - Unauthenticated Local File Inclusion
High
CVE-2025-69369
Racquet <= 1.12.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.