High
CVE-2025-69034
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-64190
XStore Core < 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-22358
Electrician - Electrical Service WordPress <= 5.6 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-68527
Academy LMS <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68013
Payment Gateway Authorize.Net CIM for WooCommerce <= 2.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-68535
Sunshine Photo Cart <= 3.5.7.1 - Missing Authorization
High
CVE-2025-14509
Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags
High
CVE-2025-13592
Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode
Medium
CVE-2025-14280
PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File
Medium
CVE-2025-69032
FiveStar <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-69024
BizPrint <= 4.6.7 - Missing Authorization
Medium
CVE-2025-69029
Struktur <= 2.5.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68873
PRIMER by chloédigital <= 1.0.25 - Reflected Cross-Site Scripting
Medium
CVE-2025-14426
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Medium
CVE-2025-69026
PopupKit <= 2.1.5 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69033
Blog Filter <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69027
Product Delivery Date for WooCommerce – Lite <= 3.2.0 - Missing Authorization
Medium
CVE-2025-69030
Backpack Traveler <= 2.10.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68010
Netgsm <= 2.9.63 - Reflected Cross-Site Scripting
Medium
CVE-2025-68009
Slider Templates <= 1.0.3 - Missing Authorization
Medium
CVE-2025-68521
WpStream <= 4.9.5 - Missing Authorization
Medium
CVE-2025-68029
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69031
Arcane <= 3.6.6 - Missing Authorization
Medium
CVE-2025-68874
Visitor Stats Widget <= 1.5.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.