Medium
CVE-2025-68904
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2026-27052
Sales Countdown Timer for WooCommerce and WordPress <= 1.1.8.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68908
Barberry <= 2.9.9.87 - Unauthenticated Local File Inclusion
High
CVE-2025-50007
xSmart <= 1.2.9.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-49249
Drone <= 1.40 - Reflected Cross-Site Scripting
Medium
CVE-2025-69363
Responsive Addons for Elementor <= 2.0.8 - Missing Authorization
Medium
CVE-2025-67614
TheNa <= 1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-69362
UiChemy <= 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-49050
Lead Capturing Pages <= 2.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24613
Ecwid Shopping Cart <= 7.0.6 - Missing Authorization
Medium
CVE-2025-49046
xPromoter <= 1.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-50006
xSmart <= 1.2.9.4 - Reflected Cross-Site Scripting
High
CVE-2026-22331
AutoParts <= 1.5.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49049
DZS Video Gallery <= 12.39 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-5805
Electron <= 1.8.2 - Missing Authorization
High
CVE-2026-22325
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24610
MetForm Pro <= 3.9.8 - Missing Authorization
High
CVE-2026-22324
Melania <= 2.5.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-14001
WP Duplicate Page <= 1.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication
Critical
CVE-2025-50002
Energia <= 1.1.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-49066
Accordion Slider PRO <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-14507
EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
Critical
CVE-2025-15030
User Profile Builder <= 3.15.1 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2025-67615
Myour <= 1.5.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.