Total CVEs

142,432

Critical Severity

3,972

High Severity

14,286

Last 7 Days

1,840
Quick preset (or use dates below)
Clear Filters
Showing 12,921 - 12,940 of 14,286 CVEs
CVE-2025-69181 HIGH - 7.3

Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.4.

Vendor: e-plugins
Product: Lawyer Directory
Published: Jan 22, 2026
Source: NVD
CVE-2025-69180 HIGH - 8.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind SQL Injection.This issue affects Ultra Portfolio: from n/a through <= 6.7.

Vendor: themepassion
Product: Ultra Portfolio
Published: Jan 22, 2026
Source: NVD
CVE-2025-69102 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boopathi Rajan WP Test Email wp-test-email allows Reflected XSS.This issue affects WP Test Email: from n/a through <= 1.1.7.

Vendor: Boopathi Rajan
Product: WP Test Email
Published: Jan 22, 2026
Source: NVD
CVE-2025-69100 HIGH - 8.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North north-wp allows PHP Local File Inclusion.This issue affects North: from n/a through <= 5.7.5.

Vendor: fuelthemes
Product: North
Published: Jan 22, 2026
Source: NVD
CVE-2025-69099 HIGH - 8.6

Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5.

Vendor: fuelthemes
Product: North
Published: Jan 22, 2026
Source: NVD
CVE-2025-69097 HIGH - 8.6

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through <= 1.9.9.5.4.

Vendor: VibeThemes
Product: WPLMS
Published: Jan 22, 2026
Source: NVD
CVE-2025-69077 HIGH - 8.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hobo hobo allows PHP Local File Inclusion.This issue affects Hobo: from n/a through <= 1.0.10.

Vendor: AncoraThemes
Product: Hobo
Published: Jan 22, 2026
Source: NVD
CVE-2025-69076 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Modern Housewife modernhousewife allows PHP Local File Inclusion.This issue affects Modern Housewife: from n/a through <= 1.0.12.

Vendor: AncoraThemes
Product: Modern Housewife
Published: Jan 22, 2026
Source: NVD
CVE-2025-69075 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Yolox yolox allows PHP Local File Inclusion.This issue affects Yolox: from n/a through <= 1.0.15.

Vendor: AncoraThemes
Product: Yolox
Published: Jan 22, 2026
Source: NVD
CVE-2025-69074 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Pearson Specter pearsonspecter allows PHP Local File Inclusion.This issue affects Pearson Specter: from n/a through <= 1.11.3.

Vendor: AncoraThemes
Product: Pearson Specter
Published: Jan 22, 2026
Source: NVD
CVE-2025-69073 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Piqes piqes allows PHP Local File Inclusion.This issue affects Piqes: from n/a through <= 1.0.11.

Vendor: AncoraThemes
Product: Piqes
Published: Jan 22, 2026
Source: NVD
CVE-2025-69072 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Prider prider allows PHP Local File Inclusion.This issue affects Prider: from n/a through <= 1.1.3.1.

Vendor: AncoraThemes
Product: Prider
Published: Jan 22, 2026
Source: NVD
CVE-2025-69071 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes TanTum tantum allows PHP Local File Inclusion.This issue affects TanTum: from n/a through <= 1.1.13.

Vendor: AncoraThemes
Product: TanTum
Published: Jan 22, 2026
Source: NVD
CVE-2025-69070 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tornados tornados allows PHP Local File Inclusion.This issue affects Tornados: from n/a through <= 2.1.

Vendor: AncoraThemes
Product: Tornados
Published: Jan 22, 2026
Source: NVD
CVE-2025-69068 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Muji muji allows PHP Local File Inclusion.This issue affects Muji: from n/a through <= 1.2.0.

Vendor: AncoraThemes
Product: Muji
Published: Jan 22, 2026
Source: NVD
CVE-2025-69067 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tails tails allows PHP Local File Inclusion.This issue affects Tails: from n/a through <= 1.4.12.

Vendor: AncoraThemes
Product: Tails
Published: Jan 22, 2026
Source: NVD
CVE-2025-69066 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Indoor Plants indoor-plants allows PHP Local File Inclusion.This issue affects Indoor Plants: from n/a through <= 1.2.7.

Vendor: AncoraThemes
Product: Indoor Plants
Published: Jan 22, 2026
Source: NVD
CVE-2025-69065 HIGH - 8.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Snow Mountain snowmountain allows PHP Local File Inclusion.This issue affects Snow Mountain: from n/a through <= 1.4.3.

Vendor: AncoraThemes
Product: Snow Mountain
Published: Jan 22, 2026
Source: NVD
CVE-2025-69064 HIGH - 8.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Pets Land petsland allows PHP Local File Inclusion.This issue affects Pets Land: from n/a through <= 1.2.8.

Vendor: AncoraThemes
Product: Pets Land
Published: Jan 22, 2026
Source: NVD
CVE-2025-69062 HIGH - 8.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Weedles weedles allows PHP Local File Inclusion.This issue affects Weedles: from n/a through <= 1.1.12.

Vendor: AncoraThemes
Product: Weedles
Published: Jan 22, 2026
Source: NVD