Medium
CVE-2025-26541
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-23735
Infugrator <= 1.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-26874
MemberSpace <= 2.1.13 - Reflected Cross-Site Scripting
Medium
CVE-2025-26537
GDPR Tools <= 1.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-25134
Theme Demo Bar <= 1.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-13896
WP-GeSHi-Highlight <= 1.4.3 Authenticated (Author+) ReDoS
Medium
CVE-2025-27267
Random Quotes <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-26575
Display Post Meta <= 2.4.4 -Reflected Cross-Site Scripting
Medium
CVE-2025-23757
ZD Scribd iPaper <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23714
AppReview <= 0.2.9 - Reflected Cross-Site Scripting
High
CVE-2025-28942
Trust Payments Gateway for WooCommerce <= 1.1.4 - Unauthenticated SQL Injection
Medium
CVE-2025-23964
Google Plus <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-26542
Zalo Live Chat <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23728
AuMenu <= 1.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-26573
Rizzi Guestbook <= 4.0.1 - Reflected Cross-Site Scripting
High
CVE-2024-13558
NP Quote Request for WooCommerce <= 1.9.179 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-13920
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
High
CVE-2024-13921
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Low
CVE-2024-13922
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
High
CVE-2024-13923
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
High
CVE-2025-2539
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
High
CVE-2025-1770
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-1766
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
Medium
CVE-2025-1314
Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.