High
CVE-2025-61914
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2025-25341
libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)
Critical
CVE-2025-68860
Mobile builder <= 1.4.2 - Authentication Bypass
Medium
CVE-2025-69011
Cool Tag Cloud <= 2.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-69008
Inboxify Sign Up Form <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-69010
Themebeez Toolkit <= 1.3.5 - Missing Authorization
Medium
CVE-2025-68519
Brands for WooCommerce <= 3.8.6.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-68877
CedCommerce Integration for Good Market <= 1.0.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-69009
Medical Equipment eCommerce WordPress Theme <= 1.0.9 - Missing Authorization
Medium
CVE-2025-68876
Invelity SPS connect <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-68006
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-68878
Advanced Custom CSS <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-68036
CubeWP <= 1.1.27 - Missing Authorization
Medium
CVE-2025-69007
Popping Sidebars and Widgets Light <= 1.27 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-68998
Heateor Social Login <= 1.1.39 - Cross-Site Request Forgery
Medium
CVE-2025-68040
Project Manager <= 3.0.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-69006
AM Events <= 1.13.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-14913
Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion
High
CVE-2025-68897
IF AS Shortcode <= 1.2 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-68583
Fast User Switching <= 1.4.10 - Cross-Site Request Forgery
Medium
CVE-2026-27360
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.38 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-68582
Funnelforms Free <= 3.8 - Missing Authorization
High
CVE-2026-24954
WpEvently <= 5.0.8 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-68996
Responsive Posts Carousel Pro <= 15.1 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.