Critical
CVE-2025-11170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-11997
Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure
Medium
CVE-2025-67912
Stars Testimonials <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49379
Custom Fields Account Registration For Woocommerce <= 1.2 - Authenticated (Author+) Privilege Escalation
Medium
CVE-2025-64267
WooCommerce Ultimate Points And Rewards <= 2.10.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-64222
WooCommerce Recover Abandoned Cart <= 24.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-66059
Seriously Simple Podcasting <= 3.13.0 - Unauthenticated Information Exposure
Medium
CVE-2025-67548
WP Delicious <= 1.9.1 - Missing Authorization
Medium
CVE-2025-64258
Follow My Blog Post <= 2.3.9 - Unauthenticated Information Exposure
High
CVE-2025-68065
Hub Core <= 5.0.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-66060
Seriously Simple Podcasting <= 3.13.0 - Missing Authorization
Medium
CVE-2025-49914
Restaurant Menu by MotoPress <= 2.4.7 - Authenticated (Subscriber+) Information Exposure
Low
CVE-2025-49300
Traveler Option Tree <= 2.8 - Authenticated (Editor+) Information Exposure
Medium
CVE-2025-66098
Travelers' Map <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-27440
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49902
Login Page Customizer – Customizer Login Page, Admin Page, Custom Design <= 2.1.1 - Missing Authorization
Medium
CVE-2025-64262
Auto Prune Posts <= 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-66055
Email Subscribers & Newsletters <= 5.9.10 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-64263
Content Pilot <= 2.1.7 - Missing Authorization
Medium
CVE-2025-66075
Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing Authorization
Medium
CVE-2025-63030
New User Approve <= 3.2.3 - Cross-Site Request Forgery
Medium
CVE-2025-67590
Ultimate FAQ <= 2.4.3 - Cross-Site Request Forgery
High
CVE-2025-12399
Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-11967
Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.