High
CVE-2025-69042
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2025-69037
Pippo <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-69041
Dekoro <= 1.0.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69336
Ultimate Store Kit Elementor Addons <= 2.9.4 - Missing Authorization
High
CVE-2025-69040
Bfres <= 1.2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69045
FooEvents for WooCommerce <= 1.20.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-69039
Bailly <= 1.3.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69088
Combo Offers WooCommerce <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69052
Registration & Login with Mobile Phone Number for WooCommerce <= 1.3.1 - Missing Authorization
Medium
CVE-2026-22360
SearchAzon <= 1.4 - Cross-Site Request Forgery
High
CVE-2025-69043
Rashy <= 1.1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-69044
Vango <= 1.3.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68013
Payment Gateway Authorize.Net CIM for WooCommerce <= 2.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
High
CVE-2025-14509
Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags
Medium
CVE-2025-69024
BizPrint <= 4.6.7 - Missing Authorization
Medium
CVE-2025-69026
PopupKit <= 2.1.5 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69027
Product Delivery Date for WooCommerce – Lite <= 3.2.0 - Missing Authorization
Medium
CVE-2025-68029
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69025
Poptics <= 1.0.20 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-68011
GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-68533
WC Builder <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-68537
Zota <= 1.3.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-68519
Brands for WooCommerce <= 3.8.6.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2026-24954
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.