Medium
CVE-2025-66094
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2025-69036
Tech Life CPT <= 16.4 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-68014
AweBooking <= 3.2.26 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-22355
Simple XML Sitemap <= 1.3 - Cross-Site Request Forgery
High
CVE-2025-69034
Lekker <= 1.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-64190
XStore Core < 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-22358
Electrician - Electrical Service WordPress <= 5.6 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-68527
Academy LMS <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68013
Payment Gateway Authorize.Net CIM for WooCommerce <= 2.1.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-68535
Sunshine Photo Cart <= 3.5.7.1 - Missing Authorization
High
CVE-2025-14509
Lucky Wheel for WooCommerce – Spin a Sale <= 1.1.13 - Authenticated (Administrator+) PHP Code Injection via Conditional Tags
Medium
CVE-2025-71347
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval
Medium
CVE-2025-68951
phpMyFAQ has Stored XSS in user list via admin-managed display_name
Medium
CVE-2025-69206
hemmelig allows SSRF Filter bypass via Secret Request functionality
High
CVE-2025-71373
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller
High
CVE-2025-71362
Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef
High
ghsa-vqmv-47xg-9wpr
Picklescan missing detection when calling pty.spawn
High
CVE-2025-13592
Advanced Ads <= 2.0.14 - Authenticated (Editor+) Remote Code Execution via Shortcode
Medium
CVE-2025-14280
PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File
Medium
CVE-2025-69032
FiveStar <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-69024
BizPrint <= 4.6.7 - Missing Authorization
Medium
CVE-2025-69029
Struktur <= 2.5.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68873
PRIMER by chloédigital <= 1.0.25 - Reflected Cross-Site Scripting
Medium
CVE-2025-14426
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.