VYPR

CVEs

408,309 total · page 1712 of 8,167

AllCriticalHighKEV
  • CVE-2025-68863HigFeb 20, 2026
    Zack Katz
    iContact for Gravity Forms
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz iContact for Gravity Forms gravity-forms-icontact allows Reflected XSS.This issue affects iContact for Gravity Forms: from n/a through <= 1.3.2.

  • CVE-2025-68862HigFeb 20, 2026
    WordPress
    Woo File Dropzone
    risk 0.50cvss 7.7epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Murtaza Bhurgri Woo File Dropzone woo-file-dropzone allows Path Traversal.This issue affects Woo File Dropzone: from n/a through <= 1.1.7.

  • CVE-2025-68856HigFeb 20, 2026
    WordPress
    Mopinion Feedback Form
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in keeswolters Mopinion Feedback Form mopinion-feedback-form allows DOM-Based XSS.This issue affects Mopinion Feedback Form: from n/a through <= 1.1.1.

  • CVE-2025-68855MedFeb 20, 2026
    WordPress
    JobBoard Job listing
    risk 0.38cvss 5.9epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in themeglow JobBoard Job listing job-board-light allows Retrieve Embedded Sensitive Data.This issue affects JobBoard Job listing: from n/a through <= 1.2.8.

  • CVE-2025-68854HigFeb 20, 2026
    WordPress
    ID Arrays
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in harman79 ID Arrays id-arrays allows DOM-Based XSS.This issue affects ID Arrays: from n/a through <= 2.1.2.

  • CVE-2025-68853HigFeb 20, 2026
    WordPress
    Contact Manager
    risk 0.57cvss 8.8epss 0.00

    Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through <= 9.1.1.

  • CVE-2025-68852HigFeb 20, 2026
    WordPress
    Court Reservation
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webmuehle Court Reservation court-reservation allows Reflected XSS.This issue affects Court Reservation: from n/a through <= 1.10.13.

  • CVE-2025-68848HigFeb 20, 2026
    WordPress
    amr cron manager
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anmari amr cron manager amr-cron-manager allows Reflected XSS.This issue affects amr cron manager: from n/a through <= 2.3.

  • CVE-2025-68847HigFeb 20, 2026
    WordPress
    iSape
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itex iSape isape allows Reflected XSS.This issue affects iSape: from n/a through <= 0.72.

  • CVE-2025-68846HigFeb 20, 2026
    WordPress
    Asynchronous Javascript
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paris Holley Asynchronous Javascript asynchronous-javascript allows Reflected XSS.This issue affects Asynchronous Javascript: from n/a through <= 1.3.5.

  • CVE-2025-68845HigFeb 20, 2026
    WordPress
    Eds Responsive Menu
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Reflected XSS.This issue affects eDS Responsive Menu: from n/a through <= 1.2.

  • CVE-2025-68844HigFeb 20, 2026
    WordPress
    Membee Login
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DaleAB Membee Login membees-member-login-widget allows Reflected XSS.This issue affects Membee Login: from n/a through <= 2.3.6.

  • CVE-2025-68843HigFeb 20, 2026
    WordPress
    FeedWordPress Advanced Filters
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Schuiling FeedWordPress Advanced Filters faf allows Reflected XSS.This issue affects FeedWordPress Advanced Filters: from n/a through <= 0.6.2.

  • CVE-2025-68842HigFeb 20, 2026
    WordPress
    Widget Logic Visual
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget Logic Visual: from n/a through <= 1.52.

  • CVE-2025-68841HigFeb 20, 2026
    WordPress
    TopperPack – Complete Elementor Addons, Theme & CPT Builder
    risk 0.49cvss 7.5epss 0.00

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder topper-pack allows PHP Local File Inclusion.This issue affects TopperPack – Complete…

  • CVE-2025-68837MedFeb 20, 2026
    WordPress
    ELEX WordPress HelpDesk & Customer Ticketing System
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer…

  • CVE-2025-68834HigFeb 20, 2026
    WordPress
    Sync Master Sheet – Product Sync with Google Sheet for WooCommerce
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-sheet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sync Master Sheet – Product Sync with…

  • CVE-2025-68564MedFeb 20, 2026
    Sendy
    Sendy
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in sendy Sendy sendy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendy: from n/a through <= 3.4.2.

  • CVE-2025-68552HigFeb 20, 2026
    WordPress
    WooCommerce Coming Soon Product with Countdown
    risk 0.49cvss 7.5epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon-product allows PHP Local File Inclusion.This issue affects WooCommerce Coming…

  • CVE-2025-68549CriFeb 20, 2026
    WordPress
    Wiguard
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1.

  • CVE-2025-68545HigFeb 20, 2026
    WordPress
    Nika
    risk 0.53cvss 8.1epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.

  • CVE-2025-68543HigFeb 20, 2026
    WordPress
    Diza
    risk 0.53cvss 8.1epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.

  • CVE-2025-68542MedFeb 20, 2026
    WordPress
    Checkout Gateway for IRIS
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through <= 1.3.

  • CVE-2025-68541CriFeb 20, 2026
    WordPress
    Ippsum
    risk 0.64cvss 9.8epss 0.00

    Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0.

  • CVE-2025-68539HigFeb 20, 2026
    WordPress
    Fana
    risk 0.53cvss 8.1epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.

  • CVE-2025-68536HigFeb 20, 2026
    WordPress
    Zota
    risk 0.53cvss 8.1epss 0.01

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.

  • CVE-2025-68534MedFeb 20, 2026
    WordPress
    PDF For Wpforms
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through <= 6.3.0.

  • CVE-2025-68531HigFeb 20, 2026
    WordPress
    ModelTheme Addons for WPBakery and Elementor
    risk 0.57cvss 8.8epss 0.00

    Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through < 1.5.6.

  • CVE-2025-68526HigFeb 20, 2026
    WordPress
    Modal Popup Box
    risk 0.57cvss 8.8epss 0.01

    Deserialization of Untrusted Data vulnerability in A WP Life Modal Popup Box modal-popup-box allows Object Injection.This issue affects Modal Popup Box: from n/a through <= 1.6.1.

  • CVE-2025-68514MedFeb 20, 2026
    Cozmoslabs
    Paid Member Subscriptions
    risk 0.42cvss 6.5epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through <= 2.16.8.

  • CVE-2025-68501HigFeb 20, 2026
    WordPress
    Mollie Payments For Woocommerce
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mollie Mollie Payments for WooCommerce mollie-payments-for-woocommerce allows Reflected XSS.This issue affects Mollie Payments for WooCommerce: from n/a through <= 8.1.1.

  • CVE-2025-68495HigFeb 20, 2026
    Crocoblock
    Jetengine
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows Reflected XSS.This issue affects JetEngine: from n/a through <= 3.8.0.

  • CVE-2025-68069HigFeb 20, 2026
    WordPress
    Directorist
    risk 0.46cvss 7.1epss 0.00

    Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.6.6.

  • CVE-2025-68051HigFeb 20, 2026
    Shiprocket
    Shiprocket
    risk 0.49cvss 7.5epss 0.00

    Authorization Bypass Through User-Controlled Key vulnerability in Shiprocket Shiprocket shiprocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shiprocket: from n/a through <= 2.0.8.

  • CVE-2025-68050MedFeb 20, 2026
    WordPress
    Leadpages
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Leadpages Leadpages leadpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadpages: from n/a through <= 1.1.3.

  • CVE-2025-68048HigFeb 20, 2026
    WordPress
    NextMove Lite
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through <= 2.23.0.

  • CVE-2025-68043HigFeb 20, 2026
    LottieFiles
    LottieFiles
    risk 0.48cvss 7.3epss 0.01

    Missing Authorization vulnerability in LottieFiles LottieFiles lottiefiles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LottieFiles: from n/a through <= 3.0.0.

  • CVE-2025-68042MedFeb 20, 2026
    WordPress
    Travelpayouts
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelpayouts: from n/a through <= 1.2.2.

  • CVE-2025-68037HigFeb 20, 2026
    WordPress
    Export Media URLs
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected XSS.This issue affects Export Media URLs: from n/a through <= 2.2.

  • CVE-2025-68032MedFeb 20, 2026
    WordPress
    Advanced WC Analytics
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced WC Analytics: from n/a through <= 3.19.0.

  • CVE-2025-68031HigFeb 20, 2026
    WordPress
    افزونه پیامک حرفه ای فراز اس ام اس
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faraz sms افزونه پیامک حرفه ای فراز اس ام اس farazsms allows Reflected XSS.This issue affects افزونه پیامک حرفه ای فراز اس ام…

  • CVE-2025-68028MedFeb 20, 2026
    WordPress
    Google Analytics For Wordpress
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10.0.

  • CVE-2025-68026MedFeb 20, 2026
    WordPress
    Ghl Wizard
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LC Wizard: from n/a through <= 2.1.1.

  • CVE-2025-68025MedFeb 20, 2026
    WordPress
    Addonify Floating Cart For WooCommerce
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through <= 1.2.17.

  • CVE-2025-68024MedFeb 20, 2026
    WordPress
    Addonify – WooCommerce Wishlist
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify – WooCommerce Wishlist: from n/a through <= 2.0.15.

  • CVE-2025-68023MedFeb 20, 2026
    WordPress
    Addonify – Compare Products For WooCommerce
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify – Compare Products For WooCommerce: from n/a through <=…

  • CVE-2025-68022HigFeb 20, 2026
    WordPress
    bluex-for-woocommerce
    risk 0.47cvss 7.3epss 0.00

    Missing Authorization vulnerability in soporteblue Plugin BlueX for WooCommerce bluex-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Plugin BlueX for WooCommerce: from n/a through <= 3.1.6.

  • CVE-2025-68021MedFeb 20, 2026
    ConveyThis
    conveythis-translate
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through <= 269.9.

  • CVE-2025-68005MedFeb 20, 2026
    WordPress
    Easy Hotel Booking
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Hotel Booking: from n/a through <= 1.9.2.

  • CVE-2025-68002MedFeb 20, 2026
    WordPress
    Open User Map
    risk 0.42cvss 6.5epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue affects Open User Map: from n/a through <= 1.4.16.