High
CVE-2025-69172
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-69177
Roneous - Creative Multi-Purpose WordPress Theme <= 2.1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69173
Tipsy <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69176
ITactics <= 1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-42736
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference
High
CVE-2025-69162
Grecko <= 5.17 - Unauthenticated Local File Inclusion
High
CVE-2025-69170
Eventicity <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69157
Gamic <= 1.15 - Unauthenticated Local File Inclusion
High
CVE-2025-69160
Gita <= 1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69171
Orpheus <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-69165
Choreo <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2025-69163
WineShop - Food & Wine Store WordPress Theme <= 3.17 - Unauthenticated Local File Inclusion
High
CVE-2025-69175
Line Agency <= 1.3.1 - Unauthenticated Local File Inclusion
High
CVE-2025-69164
Skyward <= 1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-69178
Truemag <= 4.3.14.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69159
Printo <= 1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69158
Granola <= 1.13 - Unauthenticated Local File Inclusion
High
CVE-2025-69168
Spike <= 1.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69174
Etude <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2026-48972
SeedProd Pro < 6.19.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-3173
Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure
Medium
CVE-2026-7651
User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter
Medium
CVE-2025-0898
Xpro Elementor Addons - Pro <= 1.4.7 - Authenticated (Contributor+) Arbitrary File Read via Draw SVG
Medium
CVE-2026-7618
EnvíaloSimple: Email Marketing y Newsletters <= 2.4.5 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.