Medium
CVE-2025-14477
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-14050
Design Import/Export <= 2.2 - Authenticated (Administrator+) SQL Injection via XML File Import
Medium
CVE-2025-13403
Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.3 - Missing Authorization to Authenticated (Subscriber+) Tracking Opt-In/Opt-Out Modification
Medium
CVE-2025-10289
Filter & Grids <= 3.2.0 - Unauthenticated SQL Injection
Medium
CVE-2025-66125
Ultimate Auction <= 4.3.3 - Unauthenticated Information Exposure
Medium
f33bcc8d-3d21-4de8-87ac-a5e334bb641d
WPGraphQL Smart Cache < 2.0.1 - Unauthenticated Private Content Disclosure
Medium
CVE-2025-66126
Fix Media Library <= 2.0 - Unauthenticated Information Exposure
Medium
CVE-2025-12408
Events Manager <= 7.2.2.2 - Unauthenticated Information Exposure
Medium
CVE-2025-15527
WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure
High
CVE-2025-14169
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection
High
CVE-2025-14068
WPNakama <= 0.6.3 - Unauthenticated SQL Injection via 'order_by' Parameter
Medium
CVE-2025-13660
Guest Support <= 1.2.3 - Unauthenticated User Email Disclosure in guest_support_handler AJAX Endpoint
High
CVE-2025-14044
Visitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' Cookie
Medium
CVE-2025-67520
Media Library Tools <= 1.6.15 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-10163
List Category Posts <= 0.91.0 - Authenticated (Contributor+) SQL Injection via Plugin's Shortcode
Medium
CVE-2025-14434
Ultimate Post Kit <= 4.0.15 - Unauthenticated Information Disclosure
Medium
CVE-2025-67962
Broken Link Checker <= 1.2.6 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-63058
Custom Field Template <= 2.7.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12558
Beaver Builder – WordPress Page Builder <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-62109
Geo Controller <= 8.9.5 - Unauthenticated Information Exposure
Medium
CVE-2025-62997
EasyCart <= 5.8.11 - Unauthenticated Information Exposure
Medium
CVE-2025-62998
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-13417
Plugin Organizer <= 10.2.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-67950
All In One SEO Pack <= 4.9.1 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.