Medium
CVE-2025-64267
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-64222
WooCommerce Recover Abandoned Cart <= 24.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-66059
Seriously Simple Podcasting <= 3.13.0 - Unauthenticated Information Exposure
Medium
CVE-2025-67548
WP Delicious <= 1.9.1 - Missing Authorization
Medium
CVE-2025-64258
Follow My Blog Post <= 2.3.9 - Unauthenticated Information Exposure
High
CVE-2025-68065
Hub Core <= 5.0.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-66060
Seriously Simple Podcasting <= 3.13.0 - Missing Authorization
Medium
CVE-2025-49914
Restaurant Menu by MotoPress <= 2.4.7 - Authenticated (Subscriber+) Information Exposure
Low
CVE-2025-49300
Traveler Option Tree <= 2.8 - Authenticated (Editor+) Information Exposure
Medium
CVE-2025-66098
Travelers' Map <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-27440
myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program. <= 2.9.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49902
Login Page Customizer – Customizer Login Page, Admin Page, Custom Design <= 2.1.1 - Missing Authorization
Medium
CVE-2025-64262
Auto Prune Posts <= 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-66055
Email Subscribers & Newsletters <= 5.9.10 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-64263
Content Pilot <= 2.1.7 - Missing Authorization
Medium
CVE-2025-66075
Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.0.3 - Missing Authorization
Medium
CVE-2025-63030
New User Approve <= 3.2.3 - Cross-Site Request Forgery
Medium
CVE-2025-67590
Ultimate FAQ <= 2.4.3 - Cross-Site Request Forgery
Low
CVE-2025-64481
Open redirect endpoint in Datasette
High
CVE-2025-12399
Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-11967
Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-11980
Quick Featured Images <= 13.7.3 - Authenticated (Editor+) SQL Injection via delete_orphaned
Medium
CVE-2025-11448
Gallery Plugin for WordPress – Envira Photo Gallery <= 1.11.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion
Medium
CVE-2025-12092
CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.