High
CVE-2025-58897
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2026-39655
Mayosis Core <= 5.4.7 - Missing Authorization
High
CVE-2025-69150
Medeus <= 1.14 - Unauthenticated Local File Inclusion
High
CVE-2025-58924
Geya - Renewable Energy & Ecology WordPress Theme <= 1.15 - Unauthenticated Local File Inclusion
Medium
CVE-2026-45441
Event Booking Manager for WooCommerce <= 5.3.3 - Missing Authorization
High
CVE-2026-45439
Realtyna Organic IDX plugin + WPL Real Estate <= 5.1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-69103
Brikk <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
High
CVE-2026-39661
SW Core <= 1.7.18 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2026-25444
Appointment Booking Plugin for WooCommerce – WpBookingly | All-in-One Service Manager <= 1.2.9 - Missing Authorization
High
CVE-2025-69112
Planty <= 1.14.0 - Unauthenticated Local File Inclusion
High
CVE-2025-69114
MaxiNet - Internet & IPTV Provider Elementor Template Kit <= 1.2.10 - Unauthenticated Local File Inclusion
High
CVE-2025-69130
Entrepreneur - Booking for Small Businesses WordPress <= 3.1.3 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-69105
Modernee <= 1.6.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-14361
Woocommerce Envato Affiliates <= 1.2.1 - Missing Authorization
Medium
CVE-2026-24590
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.23 - Missing Authorization
Medium
CVE-2025-69135
Events Schedule - WordPress Events Calendar <= 2.7.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-58705
Crafti - Handmade Store WordPress Theme <= 1.12 - Unauthenticated Local File Inclusion
High
CVE-2025-69136
Wanium <= 1.9.8 - Unauthenticated Local File Inclusion
High
CVE-2025-69145
Gat <= 1.16 - Unauthenticated Local File Inclusion
High
CVE-2025-69120
Dazzle <= 1.0.0 - Unauthenticated Local File Inclusion
High
CVE-2025-69104
Qreatix <= 1.9.4 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-69125
Food Drop <= 1.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-48837
Unlimited Elements For Elementor <= 2.0.8 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-69116
Iona <= 1.0.8 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.