Medium
CVE-2025-26965
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-26993
Atarim <= 4.1.0 - Reflected Cross-Site Scripting
High
CVE-2025-26932
ChatBot <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-1622
GDPR Cookie Compliance <= 4.15.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-26981
Web Accessibility By accessiBe <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-26945
Info Cards – Gutenberg block for creating Beautiful Cards <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-26974
WP Multistore Locator <= 2.5.1 - Unauthenticated SQL Injection
Medium
CVE-2025-26915
Wishlist <= 1.0.41 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-26918
Small Package Quotes – Unishippers Edition <= 2.4.9 - Reflected Cross-Site Scripting
Critical
CVE-2025-26986
Pearl - Corporate Business < 3.4.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-26939
Counters Block <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-26985
Majestic Support <= 1.0.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-2205
GDPR Cookie Compliance <= 4.15.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-26987
Frontend Admin by DynamiApps <= 3.25.17 - Reflected Cross-Site Scripting
Medium
CVE-2025-26952
Business Card Block <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26931
Tribulant Gallery Voting <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-26957
Affiliate Coupons <= 1.7.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-26999
ProfileGrid <= 5.9.4.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-26994
Zigaform – Price Calculator & Cost Estimation Form Builder Lite <= 7.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-26937
Icon List Block <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26914
Variable Inspector <= 2.6.2 - Reflected Cross-Site Scripting
Critical
CVE-2025-26979
Funnel Builder by FunnelKit <= 3.9.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-26983
Recipe Card Blocks for Gutenberg & Elementor <= 3.4.3 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Disclosure
Medium
CVE-2025-26991
WPPizza <= 3.19.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.