High
CVE-2025-68996
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-68870
CookieHint WP <= 1.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68600
Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-68563
Subscribe to Unlock Lite <= 1.3.0 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-68506
Docket Cache <= 24.07.03 - Unauthenticated Local File Inclusion
High
CVE-2025-68562
MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload
Critical
CVE-2025-13773
Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution
High
CVE-2025-68546
Nika <= 1.2.14 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68544
Diza <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-14829
e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-14800
Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
Medium
CVE-2025-67623
6Storage Rentals <= 2.20.0 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-68987
Cinerama - A WordPress Theme for Movie Studios and Filmmakers <= 2.4 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68985
Aora <= 1.3.15 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68983
Greenmart <= 4.2.11 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68984
Puca <= 2.6.39 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-13624
Overstock Affiliate Links <= 1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Critical
CVE-2025-13329
File Uploader for WooCommerce <= 1.0.3 - Unauthenticated Arbitrary File Upload via add-image-data
High
CVE-2025-13999
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-14277
Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-14804
Frontend File Manager <= 23.4 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-13641
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'
Medium
CVE-2025-12496
Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery
Medium
CVE-2025-13231
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.