Medium
CVE-2026-25310
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-67955
MyHome Core <= 4.1.0 - Unauthenticated Local File Inclusion
High
CVE-2025-67944
Nelio AB Testing <= 8.1.8 - Authenticated (Editor+) Remote Code Execution
Medium
CVE-2025-68030
Frontis Blocks <= 1.1.5 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-67946
AdForest <= 6.0.11 - Unauthenticated Local File Inclusion
High
CVE-2025-69312
Xpro Elementor Addons <= 1.4.19.1 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2025-69314
Werkstatt < 4.8.3 - Unauthenticated Local File Inclusion
Medium
CVE-2026-0808
Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter
Medium
CVE-2025-13725
Gutenberg Thim Blocks <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read via 'iconSVG' Parameter
Low
CVE-2026-0682
Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter
Medium
CVE-2025-14463
Payment Button for PayPal <= 1.2.3.41 - Missing Authorization to Unauthenticated Arbitrary Order Creation
Medium
CVE-2025-12002
Feeds for YouTube Pro <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal
Medium
CVE-2025-12718
Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay
High
CVE-2025-15491
Post Slides <= 1.0.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-67941
The Aisle < 2.9.1 - Unauthenticated Local File Inclusion
High
CVE-2025-67940
Powerlift < 3.2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-14793
DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery
High
CVE-2025-12957
All-in-One Video Gallery <= 4.5.7 - Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass
High
CVE-2025-13062
Supreme Modules Lite <= 2.5.62 - Authenticated (Author+) Arbitrary File Upload via JSON Upload Bypass
Medium
CVE-2025-12895
Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request
Critical
CVE-2025-68001
g-FFL Checkout <= 2.1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2026-22334
Woocommerce Book Price <= 1.3 - Authenticated (Subscriber++) Arbitrary File Download
High
CVE-2025-67938
Biagiotti < 3.5.2 - Unauthenticated Local File Inclusion
High
CVE-2025-69100
North <= 5.7.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.