High
CVE-2025-32158
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-2270
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 - Unauthenticated Limited Local File Inclusion
High
CVE-2024-13744
Booster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-31825
Category Icon <= 1.0.1 - Authenticated (Author+) Arbitrary File Download
Medium
CVE-2025-30596
include-file <= 1 - Authenticated (Contributor+) Arbitrary File Download
Medium
CVE-2025-31800
Publitio <= 2.2.1 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2025-2780
Woffice Core <= 5.4.21 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-31554
Docxpresso <= 2.6 - Authenticated (Contributor+) Arbitrary File Download
Medium
CVE-2025-31827
Fonto <= 1.2.2 - Authenticated (Author+) Arbitrary File Download
Critical
CVE-2025-31098
DeBounce Email Validator <= 5.7 - Unauthenticated Local File Inclusion
Critical
CVE-2025-2558
The Wound <= 0.0.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-2005
Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-3099
Advanced Search by My Solr Server <= 2.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-30996
Multiple Themify Themes <= Various Versions - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-30841
Countdown & Clock <= 2.8.8 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-31824
WP Optin Wheel <= 1.4.7 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2025-31082
News & Blog Designer Pack <= 4.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-30580
DigiWidgets Image Editor <= 1.10 - Unauthenticated Remote Code Execution
High
CVE-2025-31796
ElementsCSS Addons for Elementor <= 1.0.8.7 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2025-31097
Material Dashboard <= 1.4.5 - Unauthenticated Local File Inclusion
High
CVE-2025-2891
WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload
High
CVE-2025-2008
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-30961
Trackserver <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-31577
Appointify <= 1.0.8 - Authenticated (Admin+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.