High
CVE-2025-67972
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-68846
Asynchronous Javascript <= 1.3.5 - Reflected Cross-Site Scripting
High
CVE-2025-69299
Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-68050
Leadpages <= 1.1.3 - Missing Authorization
Medium
CVE-2026-22339
WPJobster <= 6.3.5 - Reflected Cross-Site Scripting
High
CVE-2025-67971
FluentCart < 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-68855
JobBoard Job listing <= 1.2.8 - Unauthenticated Information Exposure
High
CVE-2025-69304
Allmart <= 1.1 - Unauthenticated SQL Injection
Medium
CVE-2026-25428
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.5.5 - Authenticated (Editor+) Server-Side Request Forgery
Medium
CVE-2025-67973
Sunshine Photo Cart <= 3.5.6.2 - Missing Authorization
Medium
CVE-2025-68837
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.5 - Missing Authorization
Medium
CVE-2025-69302
DesignThemes Core Features <= 2.3 - Reflected Cross-Site Scripting
High
CVE-2025-14316
AhaChat Messenger Marketing <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-68069
Directorist <= 8.6.6 - Missing Authorization
Medium
CVE-2025-14039
Simple Folio <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Client name' and 'Link' Meta Fields
High
CVE-2025-69301
PhotoMe <= 5.6.11 - Unauthenticated PHP Object Injection
Medium
CVE-2025-68021
ConveyThis <= 270.4 - Missing Authorization
High
CVE-2025-68531
ModelTheme Addons for WPBakery and Elementor < 1.5.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-68031
افزونه پیامک حرفه ای فراز اس ام اس <= 2.7.3 - Reflected Cross-Site Scripting
High
CVE-2026-0702
VidShop – Shoppable Videos for WooCommerce <= 1.1.4 - Unauthenticated Time-Based SQL Injection via 'fields'
Medium
CVE-2025-67974
WPLegalPages <= 3.5.4 - Missing Authorization
High
CVE-2025-69305
Crete Core <= 1.4.3 - Unauthenticated SQL Injection
Medium
CVE-2025-68845
eDS Responsive Menu <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-1295
Buy Now Plus <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.