High
CVE-2025-62139
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-69045
FooEvents for WooCommerce <= 1.20.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-59129
Appointify <= 1.0.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-68014
AweBooking <= 3.2.26 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69026
PopupKit <= 2.1.5 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68029
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69025
Poptics <= 1.0.20 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-68519
Brands for WooCommerce <= 3.8.6.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68006
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68040
Project Manager <= 3.0.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68033
Custom Related Posts <= 1.8.0 - Unauthenticated Information Exposure
Medium
CVE-2025-68590
Integration for Contact Form 7 HubSpot <= 1.4.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-68551
VPSUForm <= 3.2.24 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-68550
WPBulky <= 1.1.13 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-68990
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68496
User Feedback <= 1.10.0 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-68516
Tablesome <= 1.1.35.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-15033
WooCommerce <= 10.4.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68988
E-Invoice App Malaysia <= 1.3.0 - Unauthenticated Information Exposure
Medium
CVE-2025-68570
Captivate Sync <= 3.2.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-68989
Contact Form 7 Extension For Mailchimp <= 0.9.54 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-67621
Eight Day Week Print Workflow <= 1.2.5 - Authenticated (Custom+) Information Exposure
Medium
CVE-2025-68606
PostX <= 5.0.3 - Unauthenticated Information Exposure
Medium
CVE-2025-68576
Virusdie <= 1.1.6 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.