High
CVE-2025-13592
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-14280
PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File
Medium
CVE-2025-69032
FiveStar <= 1.7 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-69024
BizPrint <= 4.6.7 - Missing Authorization
Medium
CVE-2025-69029
Struktur <= 2.5.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68873
PRIMER by chloédigital <= 1.0.25 - Reflected Cross-Site Scripting
Medium
CVE-2025-14426
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Medium
CVE-2025-69026
PopupKit <= 2.1.5 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69033
Blog Filter <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69027
Product Delivery Date for WooCommerce – Lite <= 3.2.0 - Missing Authorization
Medium
CVE-2025-69030
Backpack Traveler <= 2.10.3 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-68010
Netgsm <= 2.9.63 - Reflected Cross-Site Scripting
Medium
CVE-2025-68009
Slider Templates <= 1.0.3 - Missing Authorization
Medium
CVE-2025-68521
WpStream <= 4.9.5 - Missing Authorization
Medium
CVE-2025-68029
Wallet System for WooCommerce <= 2.7.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69031
Arcane <= 3.6.6 - Missing Authorization
Medium
CVE-2025-68874
Visitor Stats Widget <= 1.5.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-69025
Poptics <= 1.0.20 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-68891
App Bar <= 1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-68892
Scroll rss excerpt <= 5.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-69028
weForms <= 1.6.25 - Missing Authorization
High
CVE-2025-68875
Flaming Password Reset <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-68011
GLS Shipping for WooCommerce <= 1.4.0 - Reflected Cross-Site Scripting
High
CVE-2025-68540
Fana <= 1.1.35 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.