Total CVEs

142,432

Critical Severity

3,972

High Severity

14,286

Last 7 Days

1,838
Quick preset (or use dates below)
Clear Filters
Showing 12,981 - 13,000 of 14,286 CVEs
CVE-2025-68899 HIGH - 8.8

Deserialization of Untrusted Data vulnerability in designthemes Vivagh vivagh allows Object Injection.This issue affects Vivagh: from n/a through <= 2.4.

Vendor: designthemes
Product: Vivagh
Published: Jan 22, 2026
Source: NVD
CVE-2025-68894 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shoutoutglobal ShoutOut shoutout allows Reflected XSS.This issue affects ShoutOut: from n/a through <= 4.0.2.

Vendor: shoutoutglobal
Product: ShoutOut
Published: Jan 22, 2026
Source: NVD
CVE-2025-68884 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Simple Redirect wp-simple-redirect allows Reflected XSS.This issue affects WP Simple Redirect: from n/a through <= 1.1.

Vendor: Arevico
Product: WP Simple Redirect
Published: Jan 22, 2026
Source: NVD
CVE-2025-68883 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Reflected XSS.This issue affects bidorbuy Store Integrator: from n/a through <= 2.12.0.

Vendor: extremeidea
Product: bidorbuy Store Integrator
Published: Jan 22, 2026
Source: NVD
CVE-2025-68882 HIGH - 7.5

Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scalenut: from n/a through <= 1.1.3.

Vendor: Scalenut
Product: Scalenut
Published: Jan 22, 2026
Source: NVD
CVE-2025-68881 HIGH - 8.5

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal AppExperts appexperts allows SQL Injection.This issue affects AppExperts: from n/a through <= 1.4.5.

Vendor: Saad Iqbal
Product: AppExperts
Published: Jan 22, 2026
Source: NVD
CVE-2025-68871 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in noCreativity Dooodl dooodl allows Reflected XSS.This issue affects Dooodl: from n/a through <= 2.3.0.

Vendor: noCreativity
Product: Dooodl
Published: Jan 22, 2026
Source: NVD
CVE-2025-68866 HIGH - 7.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woofer696 Dinatur dinatur allows Stored XSS.This issue affects Dinatur: from n/a through <= 1.18.

Vendor: woofer696
Product: Dinatur
Published: Jan 22, 2026
Source: NVD
CVE-2025-68864 HIGH - 7.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infility Infility Global infility-global allows Stored XSS.This issue affects Infility Global: from n/a through <= 2.14.50.

Vendor: Infility
Product: Infility Global
Published: Jan 22, 2026
Source: NVD
CVE-2025-68859 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agmorpheus Syntax Highlighter Compress syntax-highlighter-compress allows Reflected XSS.This issue affects Syntax Highlighter Compress: from n/a through <= 3.0.83.3.

Vendor: agmorpheus
Product: Syntax Highlighter Compress
Published: Jan 22, 2026
Source: NVD
CVE-2025-68858 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Casey Bisson wpCAS wpcas allows Reflected XSS.This issue affects wpCAS: from n/a through <= 1.07.

Vendor: Casey Bisson
Product: wpCAS
Published: Jan 22, 2026
Source: NVD
CVE-2025-68849 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through <= 7.1.1.

Vendor: Frank Corso
Product: Quote Master
Published: Jan 22, 2026
Source: NVD
CVE-2025-68839 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through <= 1.0.

Vendor: Remi Corson
Product: Easy Theme Options
Published: Jan 22, 2026
Source: NVD
CVE-2025-68838 HIGH - 7.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in expresstechsoftware MemberPress Discord Addon expresstechsoftwares-memberpress-discord-add-on allows Reflected XSS.This issue affects MemberPress Discord Addon: from n/a through <= 1.1....

Vendor: expresstechsoftware
Product: MemberPress Discord Addon
Published: Jan 22, 2026
Source: NVD
CVE-2025-68835 HIGH - 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matiskiba Ravpage ravpage allows Reflected XSS.This issue affects Ravpage: from n/a through <= 2.33.

Vendor: matiskiba
Product: Ravpage
Published: Jan 22, 2026
Source: NVD
CVE-2025-68538 HIGH - 7.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Craft craftcoffee allows DOM-Based XSS.This issue affects Craft: from n/a through <= 2.3.6.

Vendor: ThemeGoods
Product: Craft
Published: Jan 22, 2026
Source: NVD
CVE-2025-68520 HIGH - 7.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods DotLife dotlife allows Reflected XSS.This issue affects DotLife: from n/a through < 4.9.5.

Vendor: ThemeGoods
Product: DotLife
Published: Jan 22, 2026
Source: NVD
CVE-2025-68518 HIGH - 7.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Hoteller hoteller allows Reflected XSS.This issue affects Hoteller: from n/a through < 6.8.9.

Vendor: ThemeGoods
Product: Hoteller
Published: Jan 22, 2026
Source: NVD
CVE-2025-68510 HIGH - 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through < 7.7.5.

Vendor: ThemeGoods
Product: Photography
Published: Jan 22, 2026
Source: NVD
CVE-2025-68059 HIGH - 7.6

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through <= 1.4.2.

Vendor: e-plugins
Product: Hotel Listing
Published: Jan 22, 2026
Source: NVD