Medium
CVE-2025-66116
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-68055
Hydra Booking <= 1.1.32 - Authenticated (Custom role+) SQL Injection
Medium
CVE-2025-67546
ERP <= 1.16.6 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-64295
All In One SEO Pack <= 4.8.6.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12584
Quick View for WooCommerce <= 2.2.17 - Unauthenticated Private Product Disclosure
High
CVE-2025-49919
eRoom <= 1.5.6 - Unauthenticated Information Exposure
Medium
CVE-2025-12525
Locker Content <= 1.0.0 - Unauthenticated Information Exposure
Medium
CVE-2025-13370
ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameter
Medium
CVE-2025-13385
Bookme <= 4.2 - Authenticated (Admin+) SQL Injection via 'filter[status]' Parameter
Medium
CVE-2025-10144
Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-7402
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_id
Medium
CVE-2025-67517
ArtPlacer Widget <= 2.22.9.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-14314
PopupKit <= 2.1.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-12750
Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection
High
CVE-2025-13138
WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function
Medium
CVE-2025-11773
Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update
Medium
CVE-2025-10938
UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-12894
Import WP – Export and Import CSV and XML files to WordPress <= 2.14.17 - Unauthenticated Information Exposure
Medium
CVE-2025-12747
Tainacan <= 1.0.0 - Unauthenticated Information Exposure
Medium
CVE-2025-12778
Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure
Medium
CVE-2025-13072
HandL UTM Grabber / Tracker <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-13073
HandL UTM Grabber / Tracker <= 2.8.0 - Reflected Cross-Site Scripting
High
CVE-2025-13035
Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains
High
CVE-2026-15291
Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.