High
CVE-2025-69375
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-67988
CozyStay < 1.9.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68862
Woo File Dropzone <= 1.1.7 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-69377
User Extra Fields <= 17.0 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-69374
Eleblog – Elementor Blog And Magazine Addons <= 2.0.3 - Unauthenticated Local File Inclusion
High
CVE-2026-1294
All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint
Medium
CVE-2026-1654
Peter's Date Countdown <= 2.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Medium
CVE-2026-1246
ShortPixel Image Optimizer <= 6.4.2 - Authenticated (Editor+) Arbitrary File Read via 'loadFile' Parameter
High
CVE-2025-67982
Urna <= 2.5.12 - Unauthenticated Local File Inclusion
High
CVE-2025-68841
TopperPack – Complete Elementor Addons, Theme & CPT Builder <= 1.2.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69373
VidoRev <= 2.9.9.9.9.9.7 - Unauthenticated Local File Inclusion
High
CVE-2025-67981
Besa <= 2.3.15 - Unauthenticated Local File Inclusion
High
CVE-2026-25027
Unicamp <= 2.7.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67980
Hara <= 1.2.17 - Unauthenticated Local File Inclusion
High
CVE-2025-67979
WPForms Google Sheet Connector <= 4.0.1 - Authenticated (Subscriber+) Remote Code Execution
High
CVE-2025-15368
SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-15487
Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter
High
CVE-2025-15268
Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass
High
CVE-2026-1756
WP FOFT Loader <= 2.1.39 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2026-1730
OS DataHub Maps <= 1.8.3 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2026-39538
Mikado Core <= 1.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-25326
CMSMasters Content Composer <= 1.4.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-23978
Gyan Elements <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-1391
Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.