High
CVE-2025-69166
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,533
High
CVE-2025-69161
Snowy <= 1.13 - Unauthenticated Local File Inclusion
High
CVE-2025-69167
Eros <= 1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-8089
weMail <= 2.1.2 - Reflected Cross-Site Scripting
High
CVE-2025-69172
Resurs <= 1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-69177
Roneous - Creative Multi-Purpose WordPress Theme <= 2.1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69173
Tipsy <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2026-48971
Product Import Export for WooCommerce – Import Export Product CSV Suite <= 2.5.6 - Missing Authorization
High
CVE-2025-69176
ITactics <= 1.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-8682
3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint
Medium
CVE-2026-42736
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots <= 2.14.16 - Unauthenticated Insecure Direct Object Reference
High
CVE-2025-69162
Grecko <= 5.17 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49047
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.4.29 - Missing Authorization
Medium
CVE-2026-49051
WP Meta and Date Remover <= 2.3.6 - Missing Authorization
Medium
b061facb-0411-4b81-adbd-b1419b7210df
Advanced Custom Fields (ACF®) <= 6.8.1 - Missing Authorization
Medium
CVE-2026-9570
Taskbuilder <= 5.0.7 - Reflected Cross-Site Scripting
High
CVE-2025-69170
Eventicity <= 1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-69157
Gamic <= 1.15 - Unauthenticated Local File Inclusion
High
CVE-2025-69160
Gita <= 1.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69171
Orpheus <= 1.3 - Unauthenticated Local File Inclusion
Critical
CVE-2026-42737
VikBooking Hotel Booking Engine & PMS <= 1.8.10 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-69165
Choreo <= 1.6 - Unauthenticated Local File Inclusion
Medium
CVE-2026-49046
Duplicate Page and Post <= 2.9.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-49044
Advanced Custom Fields: Font Awesome Field <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.