Medium
CVE-2025-69358
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2026-0953
Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login
High
CVE-2026-3585
The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_import
High
CVE-2026-22507
Beelove | Honey Production and Sweets Online Store WordPress Theme <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2026-22510
Melody <= 1.6.3 - Unauthenticated PHP Object Injection
Medium
CVE-2026-32447
Atarim <= 4.3.2 - Missing Authorization
Medium
CVE-2026-32446
Contact Form by WPForms <= 1.9.9.3 - Missing Authorization
Medium
CVE-2026-2433
RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging <= 5.0.11 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via postMessage
Medium
CVE-2026-1086
Font Pairing Preview For Landing Pages <= 1.3 - Cross-Site Request Forgery to Settings Update
High
CVE-2025-8899
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.3.20 - Authenticated (Author+) Privilege Escalation
Medium
CVE-2026-2721
MailArchiver <= 4.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
High
CVE-2026-2020
JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute
Medium
CVE-2026-1981
Winston AI <= 0.0.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion
High
CVE-2026-22516
Wizor's <= 2.12 - Unauthenticated Local File Inclusion
High
CVE-2026-22506
Amoli <= 1.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22512
Roisin <= 1.2.1 - Unauthenticated Local File Inclusion
High
CVE-2026-22515
VegaDays - Vegetarian Food Festival & Eco Event WordPress Theme <= 1.2.0 - Unauthenticated Local File Inclusion
High
CVE-2026-22514
Unica - Event Planning & Wedding WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
High
CVE-2026-22511
NeoBeat <= 1.2 - Unauthenticated Local File Inclusion
Medium
CVE-2026-2589
Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup
Medium
CVE-2026-22480
WebToffee WooCommerce Product Feeds – Google Shopping, Pinterest, TikTok Ads, & More <= 2.3.3 - Authenticated (Shop manager+) PHP Object Injection
High
CVE-2026-22509
Gioia <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2026-22505
Morning Records - Music Sound Studio WordPress Theme <= 1.2 - Unauthenticated PHP Object Injection
High
CVE-2026-22503
Nelson <= 1.2.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.