Critical
CVE-2025-26534
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2025-27299
MyTicket Events <= 1.2.4 - Unauthenticated Limited File Read
High
CVE-2025-27264
Doctor Appointment Booking <= 1.0.0 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-27282
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-13869
Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
Medium
CVE-2025-27283
Theme File Duplicator <= 1.3 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2024-13353
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-1043
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 - Authenticated (Contributor+) Blind Server-Side Request Forgery via embeddoc Shortcode
High
CVE-2024-13592
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-27015
Hostiko - Hosting WordPress & WHMCS Theme < 30.1 - Unauthenticated Local File Inclusion
Critical
CVE-2024-13725
Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-13741
ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.2 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Medium
CVE-2024-13691
Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia
Critical
CVE-2025-1128
Everest Forms <= 3.0.9.4 - Unauthenticated Arbitrary File Upload, Read, and Deletion
High
CVE-2024-13681
Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed
Medium
CVE-2025-0822
Bit Assist <= 1.5.2 - Path Traversal to Authenticated (Subscriber+) Arbitrary File Read via fileID Parameter
Medium
CVE-2025-26779
Keep Backup Daily <= 2.1.0 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2025-26753
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Read
Medium
CVE-2024-13834
Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme <= 3.1.4 - Authenticated (Contributor+) Blind Server-Side Request Forgery via remote_request
Medium
CVE-2024-13879
Stream <= 4.0.2 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2025-26760
Calculator Builder – Create an Online Calculator <= 1.6.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-26776
Chaty Pro <= 3.3.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-26752
Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP <= 6.1.10 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-26775
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.