Wordfence Intelligence   >   Search Results

Showing 1-20 of 1728 search results

Refine your search

Tip: You can search by CVE ID, software name or slug, or the researcher name. Expand to read about more advanced search options.

If you want to perform more advanced lookups, you can use keywords to further refine your search.

For example, woocommerce researcher:"chloe chamberland" would search for any vulnerabilities discovered by Chloe Chamberland in software that has WooCommerce in the title.

Keywords are added in keyword:value format. If the value contains spaces, you must enclose it in quotation marks.

You can use the following keywords to add criteria to your search:

title
Searches through the title of each vulnerability for matches.
date
Returns vulnerabilities by publication date. Use YYYY-MM-DD, YYYY-MM or YYYY format.
cvss-rating
Use low, medium, high or critical to limit the search to vulnerabilities with the specified rating.
researcher
Returns vulnerabilities credited to researchers containing the given text.
software
Returns vulnerabilities discovered in software containing the given text.
software-slug
Returns vulnerabilities discovered in software exactly matching the given slug.
software-type
Use plugin, theme or core to limit the search to the specified type of software.
By selecting “Search” you acknowledge that you have read and agree to the Wordfence Intelligence Terms and Conditions.
Tails <= 1.4.12 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69067
Dec 31, 2025
Researcher: Bonds
Sound | Musical Instruments Online Store <= 1.6.9 - Unauthenticated PHP Object Injection
8.1
CVE-2025-69079
Dec 31, 2025
Researcher: Tran Nguyen Bao Khanh
MoveMe <= 1.2.15 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69061
Dec 31, 2025
Researcher: Bonds
TanTum <= 1.1.13 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69071
Dec 31, 2025
Researcher: Bonds
Download Media Library <= 0.2.1 - Unauthenticated Sensitive Information Exposure
7.5
CVE-2025-62114
Dec 31, 2025
Researcher: Nabil Irawan
Tornados <= 2.1 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69070
Dec 31, 2025
Researcher: Bonds
Piqes <= 1.0.11 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69073
Dec 31, 2025
Researcher: Bonds
Eldon <= 1.0 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69057
Dec 31, 2025
Researcher: Bonds
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery
7.2
CVE-2025-62088
Dec 31, 2025
Researcher: Bonds
Snow Mountain <= 1.4.3 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69065
Dec 31, 2025
Researcher: Bonds
Malta <= 1.3.3 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69078
Dec 31, 2025
Researcher: Bonds
Terms descriptions <= 3.4.9 - Unauthenticated Information Exposure
7.5
CVE-2025-62139
Dec 31, 2025
Researcher: Muhammad Nur Ibnu Hubab
Weedles <= 1.1.12 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69062
Dec 31, 2025
Researcher: Bonds
uReach <= 1.3.3 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69060
Dec 31, 2025
Researcher: Bonds
Indoor Plants <= 1.2.7 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69066
Dec 31, 2025
Researcher: Bonds
PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69058
Dec 31, 2025
Researcher: Bonds
Infility Global <= 2.14.49 - Unauthenticated SQL Injection
7.5
CVE-2025-68865
Dec 31, 2025
Researcher: Drew Webber (mcdruid)
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion
8.1
CVE-2025-69075
Dec 31, 2025
Researcher: Bonds
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
7.5
CVE-2025-62126
Dec 31, 2025
Researcher: Legion Hunter
Arlo <= 6.0.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2025-69082
Dec 31, 2025
Researcher: Tran Nguyen Bao Khanh
Title CVE ID CVSS Researchers Date
Tails <= 1.4.12 - Unauthenticated Local File Inclusion CVE-2025-69067 8.1 Bonds December 31, 2025
Sound | Musical Instruments Online Store <= 1.6.9 - Unauthenticated PHP Object Injection CVE-2025-69079 8.1 Tran Nguyen Bao Khanh December 31, 2025
MoveMe <= 1.2.15 - Unauthenticated Local File Inclusion CVE-2025-69061 8.1 Bonds December 31, 2025
TanTum <= 1.1.13 - Unauthenticated Local File Inclusion CVE-2025-69071 8.1 Bonds December 31, 2025
Download Media Library <= 0.2.1 - Unauthenticated Sensitive Information Exposure CVE-2025-62114 7.5 Nabil Irawan December 31, 2025
Tornados <= 2.1 - Unauthenticated Local File Inclusion CVE-2025-69070 8.1 Bonds December 31, 2025
Piqes <= 1.0.11 - Unauthenticated Local File Inclusion CVE-2025-69073 8.1 Bonds December 31, 2025
Eldon <= 1.0 - Unauthenticated Local File Inclusion CVE-2025-69057 8.1 Bonds December 31, 2025
WordPress & WooCommerce Scraper Plugin, Import Data from Any WebSite. <= 1.0.7 - Unauthenticated Server-Side Request Forgery CVE-2025-62088 7.2 Bonds December 31, 2025
Snow Mountain <= 1.4.3 - Unauthenticated Local File Inclusion CVE-2025-69065 8.1 Bonds December 31, 2025
Malta <= 1.3.3 - Unauthenticated Local File Inclusion CVE-2025-69078 8.1 Bonds December 31, 2025
Terms descriptions <= 3.4.9 - Unauthenticated Information Exposure CVE-2025-62139 7.5 Muhammad Nur Ibnu Hubab December 31, 2025
Weedles <= 1.1.12 - Unauthenticated Local File Inclusion CVE-2025-69062 8.1 Bonds December 31, 2025
uReach <= 1.3.3 - Unauthenticated Local File Inclusion CVE-2025-69060 8.1 Bonds December 31, 2025
Indoor Plants <= 1.2.7 - Unauthenticated Local File Inclusion CVE-2025-69066 8.1 Bonds December 31, 2025
PartyMaker <= 1.1.15 - Unauthenticated Local File Inclusion CVE-2025-69058 8.1 Bonds December 31, 2025
Infility Global <= 2.14.49 - Unauthenticated SQL Injection CVE-2025-68865 7.5 Drew Webber (mcdruid) December 31, 2025
Yolox <= 1.0.15 - Unauthenticated Local File Inclusion CVE-2025-69075 8.1 Bonds December 31, 2025
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure CVE-2025-62126 7.5 Legion Hunter December 31, 2025
Arlo <= 6.0.3 - Unauthenticated Stored Cross-Site Scripting CVE-2025-69082 7.2 Tran Nguyen Bao Khanh December 31, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation