High
CVE-2025-68877
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-69009
Medical Equipment eCommerce WordPress Theme <= 1.0.9 - Missing Authorization
Medium
CVE-2025-68876
Invelity SPS connect <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-68006
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68878
Advanced Custom CSS <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-68036
CubeWP <= 1.1.27 - Missing Authorization
Medium
CVE-2025-69007
Popping Sidebars and Widgets Light <= 1.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-68998
Heateor Social Login <= 1.1.39 - Cross-Site Request Forgery
Medium
CVE-2025-68040
Project Manager <= 3.0.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69006
AM Events <= 1.13.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-14913
Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
High
CVE-2025-68897
IF AS Shortcode <= 1.2 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-68583
Fast User Switching <= 1.4.10 - Cross-Site Request Forgery
Medium
CVE-2026-27360
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.38 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-68582
Funnelforms Free <= 3.8 - Missing Authorization
High
CVE-2026-24954
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-68996
Responsive Posts Carousel Pro <= 15.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-68525
Category Icon <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-68995
My Sticky Elements <= 2.3.3 - Missing Authorization
Medium
CVE-2025-68861
Plugin Optimizer <= 1.3.7 - Missing Authorization
Medium
CVE-2025-68591
Simple File List <= 6.3.7 - Missing Authorization
High
CVE-2025-68870
CookieHint WP <= 1.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68585
Document Revisions <= 3.7.2 - Missing Authorization
Medium
CVE-2025-68608
Userpro <= 5.1.9 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.