Medium
CVE-2025-14001
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2025-50002
Energia <= 1.1.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-49066
Accordion Slider PRO <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-14507
EventPrime - Events Calendar, Bookings and Tickets <= 4.2.7.0 - Unauthenticated Sensitive Information Exposure via REST API
Critical
CVE-2025-15030
User Profile Builder <= 3.15.1 - Unauthenticated Privilege Escalation via Account Takeover
High
CVE-2025-67615
Myour <= 1.5.1 - Unauthenticated Local File Inclusion
High
CVE-2025-50004
JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2026-22330
Right Way <= 4.0 - Unauthenticated Local File Inclusion
High
CVE-2025-67617
Consult Aid <= 1.4.3 - Unauthenticated PHP Object Injection
Medium
CVE-2025-54002
xSmart <= 1.2.9.4 - Missing Authorization
Medium
CVE-2026-0684
CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import
High
CVE-2025-67616
Mella <= 1.2.29 - Unauthenticated Local File Inclusion
High
CVE-2026-22326
Reprizo <= 1.0.8 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24615
Cream Magazine <= 2.1.10 - Missing Authorization
Medium
CVE-2026-24616
WP Popups <= 2.2.0.5 - Missing Authorization
Medium
CVE-2026-24617
Easy Modal <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24619
PopCash.Net Code Integration Tool <= 1.8 - Missing Authorization
Medium
CVE-2026-27059
Penci Recipe <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-27058
Penci Podcast <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-24392
HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce <= 2.14.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2026-24967
Amelia <= 1.2.38 - Missing Authorization
Medium
CVE-2026-27056
Solid Central – Site Management, Backups, Security, and Reporting <= 3.2.8 - Missing Authorization
Medium
CVE-2026-27055
Penci AI SmartContent Creator <= 2.0 - Missing Authorization
Medium
CVE-2026-27057
Penci Filter Everything <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.