Medium
CVE-2025-67909
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
Critical
CVE-2025-13773
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution
High
CVE-2025-68546
Nika <= 1.2.14 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68544
Diza <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-68994
Product Loops for WooCommerce <= 2.1.2 - Missing Authorization
Medium
CVE-2025-68993
Share, Print and PDF Products for WooCommerce <= 3.1.2 - Missing Authorization
Medium
CVE-2025-68578
Addonify <= 2.0.4 - Missing Authorization
Medium
CVE-2025-15033
WooCommerce <= 10.4.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12398
Product Table for WooCommerce <= 5.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-13838
WishSuite <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute
Medium
CVE-2025-14054
WC Builder <= 1.2.0 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'heading_color' Shortcode Attribute
High
CVE-2025-68985
Aora <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68983
Greenmart <= 4.2.11 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68984
Puca <= 2.6.39 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-14298
FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode
Critical
CVE-2025-13329
File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data
Medium
CVE-2025-14277
Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-13110
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
Medium
CVE-2026-1000
MailerLite - WooCommerce integration <= 3.1.3 - Missing Authorization to Data Deletion
Medium
CVE-2025-13231
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition
High
CVE-2025-67530
Besa <= 2.3.15 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-67542
Multi-Step Checkout for WooCommerce <= 2.33 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-15526
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter
High
CVE-2025-67529
Fashion < 5.3.0 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.