Medium
CVE-2025-26744
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-2269
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter
Medium
CVE-2025-32606
Listings for Buildium <= 0.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-3282
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Medium
CVE-2025-3514
SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-26998
SKT Blocks – Gutenberg based Page Builder <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26908
Kargo Entegratör <= 1.1.14 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2025-26982
DSGVO Youtube <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32557
WP Featured Screenshot <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-26903
InPost Gallery <= 2.1.4.3 - Cross-Site Request Forgery
Critical
CVE-2025-26894
Coming Soon, Maintenance Mode <= 1.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32625
Mobile Pages <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-26880
SKT Skill Bar <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32544
WooCommerce Loyal Customers <= 2.6 - Missing Authorization
Medium
CVE-2025-22269
Real Testimonials <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1456
Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated DOM-Based (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-3418
WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update
Medium
CVE-2025-26867
Bulk <= 1.0.11 - Missing Authorization
Medium
CVE-2025-1455
Royal Elementor Addons and Templates <= 1.7.1012 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3513
SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-26990
Royal Elementor Addons <= 1.7.1006 - Authenticated (Admin+) Server Side Request Forgery
Medium
CVE-2025-26950
Nepali Date Converter <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32562
WP Easy Poll <= 2.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2025-26997
Wireless Butler <= 1.0.11 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.