Medium
CVE-2025-67622
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2026-27387
DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Missing Authorization
Medium
CVE-2025-68980
WeDesignTech Portfolio <= 1.0.2 - Missing Authorization
Critical
CVE-2024-56066
Agency Toolkit <= 1.0.23 - Unauthenticated Privilege Escalation
Medium
CVE-2025-68593
Adminify <= 4.0.6.1 - Missing Authorization
Medium
CVE-2025-68981
HomeFix Elementor Portfolio <= 1.0.1 - Missing Authorization
High
CVE-2025-14437
Hummingbird <= 3.18.0 - Unauthenticated Sensitive Information Exposure via Log File
Medium
CVE-2025-14618
Sweet Energy Efficiency <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion
Medium
CVE-2025-14277
Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-13110
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
High
CVE-2025-14364
Demo Importer Plus <= 2.0.8 - Missing Authorization to Authenticated (Subscriber+) Site Reset and Privilege Escalation
Medium
CVE-2025-12885
Embed Any Document <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-13730
OpenID Connect Generic Client <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-13498
Download Manager <= 3.3.32 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosure
Medium
CVE-2025-68567
My auctions allegro <= 3.6.33 - Cross-Site Request Forgery
Medium
CVE-2025-68978
DesignThemes Core <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68977
DesignThemes Portfolio Addon <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-14804
Frontend File Manager <= 23.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-68532
ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68568
Claspo – Popups, Spin the Wheel & Email Capture <= 1.0.7 - Missing Authorization
Medium
CVE-2025-68587
Watu Quiz <= 3.4.5 - Missing Authorization
Medium
CVE-2025-68573
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2025-14719
Relevanssi < 4.26.0 (Free) < 2.29.0 (Premium) - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68574
WPBakery Visual Composer WHMCS Elements <= 1.0.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.