Medium
CVE-2025-49399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-53337
LifePress <= 2.1.3 - Missing Authorization
Medium
CVE-2025-48356
Kanpress <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49382
JobZilla - Job Board WordPress Theme <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2025-49404
Listeo-Core < 2.0.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-48362
Hesabfa Accounting <= 2.2.4 - Cross-Site Request Forgery
Medium
CVE-2025-49389
Notice Bar <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48365
Custom Comment <= 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-52761
WP Funnel Manager <= 1.4.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48358
Risk Free Cash On Delivery (COD) - WooCommerce <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48361
Hesabfa Accounting <= 2.2.4 - Unauthenticated Sensitive Information Exposure via Log File
Medium
CVE-2025-48352
Yandex Site search pinger <= 1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-54709
Sala <= 1.1.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-52754
Sello ChannelConnector <= 1.6.3 - Reflected Cross-Site Scripting
High
CVE-2025-53576
Ovatheme Events <= 1.2.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48364
rajce <= 0.4.2 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-49406
Houzez <= 4.1.1 - Missing Authorization
Medium
CVE-2025-49408
Templately <= 3.2.7 - Authenticated (Author+) Information Disclosure
Medium
CVE-2025-49391
Sign-up Sheets <= 2.3.3 - Cross-Site Request Forgery
Medium
CVE-2025-49395
Themify Icons <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48363
Popup for CF7 with Sweet Alert <= 1.6.5 - Cross-Site Request Forgery
Medium
CVE-2025-48360
Varnish/Nginx Proxy Caching <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48359
ATT YouTube Widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-49392
Themify Audio Dock <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.