Medium
CVE-2025-66142
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-66136
Carter for Elementor <= 1.0.2 - Missing Authorization
Medium
CVE-2025-66147
Coder for Elementor <= 1.0.13 - Missing Authorization
High
CVE-2025-13339
Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read
Critical
CVE-2025-13613
Elated Membership <= 1.2 - Authentication Bypass via Social Login
Medium
CVE-2025-14313
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
Medium
CVE-2025-66135
Imager for Elementor <= 2.0.4 - Missing Authorization
Medium
CVE-2025-67962
Broken Link Checker <= 1.2.6 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-13677
Simple Download Counter <= 2.2.2 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal
High
CVE-2025-14390
Video Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
Medium
CVE-2025-14312
Advance WP Query Search Filter <= 1.0.10 - Reflected Cross-Site Scripting
High
CVE-2025-13604
Login Security, FireWall, Malware removal by CleanTalk <= 2.168 - Unauthenticated Stored Cross-Site Scripting via Page URL
Medium
CVE-2025-13924
Advanced Product Fields (Product Addons) for WooCommerce <= 1.6.17 - Cross-Site Request Forgery to Product Field Group Duplication and Publication
Medium
CVE-2025-63058
Custom Field Template <= 2.7.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12558
Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-62109
Geo Controller <= 8.9.5 - Unauthenticated Information Exposure
Medium
CVE-2025-62871
Just TinyMCE Custom Styles <= 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2025-62872
Social Photo Fetcher <= 3.0.4 - Cross-Site Request Forgery
Medium
CVE-2025-13958
YaMaps <= 0.6.39 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-66096
Table Block by Tableberg <= 0.6.9 - Missing Authorization
Medium
CVE-2025-62740
WP-CRM System <= 3.4.6 - Missing Authorization
Medium
CVE-2025-62873
Flashy Marketing Automation <= 2.0.8 - Cross-Site Request Forgery
Medium
CVE-2025-62870
Eupago Gateway For Woocommerce <= 4.7.1 - Missing Authorization
High
CVE-2025-12705
Social Reviews & Recommendations <= 2.5 - Unauthenticated Stored Cross-Site Scripting via Social Media Reviews
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.