Medium
CVE-2025-26774
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-26769
Vertex Addons for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26764
Distance Based Shipping Calculator <= 2.0.22 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-26773
Analytify <= 5.5.0 - Missing Authorization
Medium
CVE-2025-64283
RTMKit <= 1.6.7 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2025-26768
what3words Address Field <= 4.0.15 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13825
Email Keep <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26758
Spotlight Social Media Feeds <= 1.7.1 - Unauthenticated Sensitive Information Disclosure
High
CVE-2025-26753
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Read
High
CVE-2024-13488
LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection
Medium
CVE-2024-13834
Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme <= 3.1.4 - Authenticated (Contributor+) Blind Server-Side Request Forgery via remote_request
Medium
CVE-2025-26751
Alphabetic Pagination <= 3.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26589
IE CSS3 Support <= 2.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22635
Eventer <= 3.9.8 - Reflected Cross-Site Scripting
High
CVE-2025-26763
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2025-26761
Easy Elementor Addons <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13879
Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2025-1033
Badgearoo <= 1.0.14 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-26760
Calculator Builder – Create an Online Calculator <= 1.6.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-26766
Leyka <= 3.31.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26767
Qubely <= 1.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-12562
s2Member Pro <= 241216 - Unauthenticated PHP Object Injection
Critical
CVE-2025-26776
Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-26588
TTT Crop <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.