Medium
CVE-2025-10927
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-64265
Frontend File Manager <= 23.2 - Missing Authorization
High
CVE-2025-12115
WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration
Medium
CVE-2025-8385
Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read
Medium
CVE-2025-64357
Advanced Database Cleaner <= 3.1.6 - Cross-Site Request Forgery
Medium
CVE-2025-12094
OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing
Medium
CVE-2025-12175
The Events Calendar <= 6.15.9 - Missing Authorization to Authenticated (Subscriber+) Draft Event Title/QR Code Exposure
Medium
CVE-2025-64379
Booster for WooCommerce <= 7.4.0 - Missing Authorization
Medium
CVE-2025-10636
NS Maintenance Mode for WP <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-8489
King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege Escalation
Medium
CVE-2025-64358
Smart Coupons for WooCommerce <= 2.2.3 - Missing Authorization
Medium
CVE-2025-67599
WebToffee eCommerce Marketing Automation <= 2.1.1 - Missing Authorization
Medium
CVE-2025-66085
Arconix Shortcodes <= 2.1.18 - Missing Authorization
Medium
CVE-2025-64204
SmartMag <= 10.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-66112
Accessibility Toolkit by WebYes <= 2.0.4 - Missing Authorization
Medium
CVE-2025-12502
Attention Bar <= 0.7.2.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-64364
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-12521
Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
Medium
CVE-2025-66097
I Order Terms <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2025-64362
K Elements < 5.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-64363
Kleo < 5.5.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-64208
Jannah - Extensions <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64382
Order Export & Order Import for WooCommerce <= 2.6.7 - Missing Authorization
Medium
CVE-2025-66089
Product Feed for WooCommerce <= 2.3.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.