Medium
CVE-2026-1045
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-14348
weMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure
High
CVE-2025-14977
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure
Medium
CVE-2025-14351
Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion
Medium
CVE-2025-14798
LearnPress – WordPress LMS Plugin <= 4.3.2.4 - Missing Authorization to Unauthenticated Sensitive User Information Disclosure via REST API
Medium
CVE-2025-14978
PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) <= 1.119.8 - Missing Authorization to Unauthenticated Order Status Modification
Medium
CVE-2026-1051
Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription
Medium
CVE-2025-15466
Image Photo Gallery Final Tiles Grid <= 3.6.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Gallery Management
Medium
CVE-2026-25453
Advanced iFrame <= 2025.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-67943
My auctions allegro <= 3.6.32 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-24584
Tutor LMS BunnyNet Integration <= 1.0.0 - Authenticated (Tutor instructor+) Stored Cross-Site Scripting
Medium
CVE-2025-68073
GDPR CCPA Compliance Support <= 2.7.4 - Missing Authorization
High
CVE-2019-25297
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-68018
Order Listener for WooCommerce <= 3.6.1 - Missing Authorization
Medium
CVE-2025-68836
Table of Contents Creator <= 1.6.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-68894
ShoutOut <= 4.0.2 - Reflected Cross-Site Scripting
High
CVE-2025-69312
Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2026-25308
Simple Membership <= 4.6.9 - Missing Authorization
Medium
CVE-2026-24583
SumUp Payment Gateway For WooCommerce <= 2.7.9 - Missing Authorization
Medium
CVE-2025-68004
My Post Order <= 1.2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-68019
SEO Booster <= 7.3.2 - Missing Authorization
High
418a6ed7-a19e-4741-a6db-f1016156a468
Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-69313
PostX <= 5.0.3 - Missing Authorization
Medium
CVE-2026-24581
Points and Rewards for WooCommerce <= 2.9.5 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.