National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,350 matching advisories
Page 99 of 1,890
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through <= 1.6.1....

📅 2026-02-20 Inspect Dossier →
CVE-2025-68514 MEDIUM 6.5
CWE-639 Remote (AV:N)

Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce allows Reflected XSS.This i...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Reflected XSS.This issue affects JetEngine: from n/a throug...

📅 2026-02-20 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.6.6....

📅 2026-02-20 Inspect Dossier →
CWE-639 Remote (AV:N)

Authorization Bypass Through User-Controlled Key vulnerability in Shiprocket Shiprocket shiprocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shiprocket...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68050 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Leadpages Leadpages leadpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadpages: from n/a through <= 1.1.3....

📅 2026-02-20 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite...

📅 2026-02-20 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in LottieFiles LottieFiles lottiefiles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LottieFiles: from n/a through <= 3...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68042 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelpayouts: from n/a thro...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected XSS.This issue affects Export Me...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68032 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced ...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faraz sms افزونه پیامک حرفه ای فراز اس ام اس farazsms allows Reflected XSS.This issue affects افزو...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68028 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4W...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68026 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LC Wizard: from n/a through <= 2.1.1...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68025 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68024 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify – ...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68023 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue...

📅 2026-02-20 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in soporteblue Plugin BlueX for WooCommerce bluex-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Plugin ...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68021 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a throug...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68005 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Hotel Booking: from n/a t...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68002 MEDIUM 6.5
CWE-22 Remote (AV:N)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a ...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68000 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/...

📅 2026-02-20 Inspect Dossier →
CWE-288 Remote (AV:N)

Authentication Bypass Using an Alternate Path or Channel vulnerability in kamleshyadav Miraculous Elementor miraculous-el allows Authentication Abuse.This issue affects Miraculous Elementor: from n/a ...

📅 2026-02-20 Inspect Dossier →
Showing Page 99 of 1,890 • 45,350 matching CVEs (out of 396,747 NIST advisories)