High
CVE-2025-67847
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2026-24549
GeoDirectory <= 2.8.149 - Cross-Site Request Forgery
Medium
CVE-2026-25441
LeadConnector <= 3.0.21 - Missing Authorization
Medium
CVE-2025-15520
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68999
Happy Addons for Elementor <= 3.20.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-24991
Extensions For CF7 <= 3.4.0 - Authenticated (Contributor+) Insecure Direct Object Reference
Medium
CVE-2026-24550
Blockons <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-67969
UPI QR Code Payment Gateway for WooCommerce <= 1.5.1 - Missing Authorization
High
CVE-2025-69295
Coven Core <= 1.3 - Unauthenticated SQL Injection
High
CVE-2025-69294
PeakShops <= 1.5.9 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-1251
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.4.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2026-24992
Advanced WooCommerce Product Sales Reporting <= 4.1.2 - Unauthenticated Information Exposure
High
CVE-2026-24548
Radio Player <= 2.0.91 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-69322
PeakShops < 1.5.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24551
Monetag Official <= 1.1.3 - Missing Authorization
Medium
CVE-2026-24994
Sunshine Photo Cart <= 3.5.7.2 - Missing Authorization
High
CVE-2025-68848
amr cron manager <= 2.3 - Unauthenticated Stored Cross-Site Scripting
Low
CVE-2026-26188
Freeform Craft Plugin CP UI (builder/integrations) has Stored Cross-Site Scripting (XSS) issue
Medium
CVE-2025-22234
Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide
High
CVE-2024-11976
BuddyPress <= 14.3.3 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2026-24132
Orval Mock Generation Code Injection via const
Low
ghsa-7jxj-rpx7-ph2c
Umbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp
High
CVE-2026-24006
Seroval affected by Denial of Service via Deeply Nested Objects
High
CVE-2025-65098
Typebot affected by Credential Theft via Client-Side Script Execution and API Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.