Medium
CVE-2025-14947
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-68059
Hotel Listing <= 1.4.2 - Missing Authorization
Medium
CVE-2025-67967
Lawyer Directory <= 1.3.3 - Missing Authorization
Medium
CVE-2026-25311
Autoshare for Twitter <= 2.3.1 - Missing Authorization
Medium
CVE-2025-69181
Lawyer Directory <= 1.3.4 - Missing Authorization
Critical
CVE-2025-14892
Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation via Account Takeover
Medium
CVE-2025-69193
Membership <= 1.6.4 - Missing Authorization
Medium
CVE-2025-69192
Real Estate Pro <= 2.1.5 - Missing Authorization
Medium
CVE-2025-68881
AppExperts <= 1.4.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-69186
Hospital Doctor Directory <= 1.3.9 - Missing Authorization
High
CVE-2025-69293
Final User <= 1.2.5 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-24558
ABG Rich Pins <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69185
Hotel Listing <= 1.4.2 - Missing Authorization
Medium
CVE-2026-0914
WP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' Shortcode
Medium
CVE-2025-69189
JobBank <= 1.2.3 - Missing Authorization
Critical
CVE-2025-68869
LazyTasks <= 1.2.37 - Unauthenticated Privilege Escalation
Medium
CVE-2026-24555
ArtPlacer Widget <= 2.23.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68057
Hospital Doctor Directory <= 1.3.9 - Missing Authorization
Medium
CVE-2025-69187
Final User <= 1.2.5 - Missing Authorization
Medium
CVE-2026-24563
LifePress <= 2.2.1 - Missing Authorization
Medium
CVE-2025-68072
Easy Property Listings <= 3.5.20 - Missing Authorization
High
CVE-2025-69292
Membership <= 1.6.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-24560
Cloudinary <= 3.3.0 - Missing Authorization
High
CVE-2025-14866
Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.