Medium
CVE-2025-53289
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-48090
Blanka - One Page WordPress < 1.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49394
Image Gallery block – Create and display photo gallery/photo album. <= 1.0.7 - Missing Authorization
Medium
CVE-2025-54733
All Bootstrap Blocks <= 1.3.28 - Missing Authorization
Medium
CVE-2025-53579
Captcha.eu <= 1.0.60 - Reflected Cross-Site Scripting
Medium
CVE-2025-54724
Golo <= 1.7.1 - Reflected Cross-Site Scripting
High
CVE-2025-53328
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58877
Javo Core <= 3.0.0.529 - Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-60079
Parallax Section block <= 1.0.9 - Missing Authorization
Medium
CVE-2025-53250
Chartbeat <= 2.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-53215
Yahoo! WebPlayer <= 2.0.6 - Reflected Cross-Site Scripting
High
CVE-2025-53326
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48317
WooCommerce Payment Gateway for Saferpay <= 0.4.9 - Unauthenticated Path Traversal
Medium
CVE-2025-48107
Uncode < 2.9.4.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-6247
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-6366
Event List <= 2.0.4 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-5931
Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation
High
CVE-2025-9172
Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter
Medium
CVE-2025-48307
SEO For Images <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-5998
PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API
Medium
CVE-2025-48109
XM-Backup <= 0.9.1 - Cross-Site Request Forgery
Medium
CVE-2025-54713
Taxi Booking Manager for WooCommerce <= 1.3.0 - Missing Authorization
Medium
CVE-2025-48311
Invisible Optin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-53584
WP Ticket Customer Service Software & Support Ticket System <= 6.0.2 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.