Medium
CVE-2025-69054
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-62111
Extra Shortcodes <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-69071
TanTum <= 1.1.13 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49349
Reuters Direct <= 3.0.0 - Missing Authorization
Medium
CVE-2025-49334
MyD Delivery <= 1.3.7 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-63040
Post Snippets <= 4.0.11 - Cross-Site Request Forgery
Medium
CVE-2025-62751
Vireo <= 1.0.24 - Missing Authorization
Medium
CVE-2025-66156
Watcher for Elementor <= 1.0.9 - Missing Authorization
Medium
CVE-2025-49337
Dashboard Beacon <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-62089
Mergado Pack <= 4.2.0 - Cross-Site Request Forgery
Medium
CVE-2025-49358
Content Fetcher <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62123
Gmail SMTP <= 1.0.7 - Cross-Site Request Forgery
High
CVE-2025-69075
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69055
BM Content Builder < 3.16.3.3 - Authenticated (Contributor+) Arbitrary File Download
Medium
CVE-2025-62752
Calendar.online / Kalender.digital <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-69058
PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62079
Export Categories & Taxonomies <= 1.0.3 - Missing Authorization
Medium
CVE-2025-49339
Direct Payments WP <= 1.3.0 - Missing Authorization
Medium
CVE-2025-62096
Maximum Products per User for WooCommerce <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62119
Add Featured Image Custom Link <= 2.0.0 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2025-62126
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
High
CVE-2025-68865
Infility Global <= 2.15.36 - Unauthenticated SQL Injection
Medium
CVE-2025-66155
Questionar for Elementor <= 1.1.7 - Missing Authorization
Medium
CVE-2025-62135
Responsive Block Control <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.