Medium
CVE-2025-69153
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2026-11767
CRT Addons for Elementor <= 1.6.6 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-69152
Artale | Wedding Photography WordPress <= 2.2.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-57670
CodePeople Post Map for Google Maps <= 1.2.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-69132
Corpkit - Business Consulting WordPress Theme <= 1.0.5 - Authenticated (Subscriber+) Sensitive Information Exopsure
Medium
CVE-2026-14185
WPBot AI ChatBot <= 8.1.0 - Missing Authorization
High
CVE-2026-57673
Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.7 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-69154
SpaLab | Beauty Salon WordPress <= 6.7 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-57672
wpDataTables (Premium) <= 6.5.1.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-57674
Timetics – Appointment Booking Calendar & Scheduling System <= 1.0.58 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-69156
Kids Zone - Children WordPress <= 5.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-8082
Bpost Shipping Platform <= 3.2.2 - Unauthenticated SQL Injection
High
CVE-2026-8141
Ajax Load More - Filters <= 3.4.1 - Unauthenticated Stored Cross-Site Scripting via 'taxonomy_include_children' Field
Unrated
pysec-2026-580
Malicious code in coolbox (PyPI)
Critical
CVE-2026-9711
EventON - WordPress Virtual Event Calendar Plugin <= 5.0.11 - Unauthenticated Blind SQL Injection via Search Parameter
Unrated
pysec-2026-579
Malicious code in cmd2func (PyPI)
Unrated
pysec-2026-578
Malicious code in bramin (PyPI)
Unrated
pysec-2026-586
Malicious code in tlask (PyPI)
High
CVE-2026-12240
Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field
Medium
CVE-2026-48717
OpenAM OAuth Authorization Bypass via PKCE Challenge
High
CVE-2026-47426
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
High
CVE-2026-47424
OpenAM Authenticated RCE via Groovy Sandbox Escape
Unrated
pysec-2026-584
Malicious code in rlask (PyPI)
Critical
CVE-2026-12073
ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.