Medium
CVE-2025-60239
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-49956
Fade Slider <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-49957
Email Attachment by Order Status & Products <= 1.0.1 - Reflected Cross-Site Scripting
High
CVE-2025-53194
JetEngine <= 3.7.1 - Authenticated (Contributor+) Server-Side Template Injection to Remote Code Execution
Medium
CVE-2025-49373
Evergreen Content Poster <= 1.4.5 - Cross-Site Request Forgery
High
CVE-2025-60240
AnyComment <= 0.3.6 - Unauthenticated Local File Inclusion
High
CVE-2025-6423
BeeTeam368 Extensions <= 2.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-1313
Nokri - Job Board WordPress Theme <= 1.6.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Medium
CVE-2025-7518
RSFirewall! <= 1.1.42 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2025-6057
WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-28961
URL Shortener <= 3.0.7 - Unauthenticated PHP Object Injection
High
e1334ab5-515c-4bce-b437-ee68a3315b78
WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - Unauthenticated SQL Injection
High
CVE-2025-7504
Friends 3.5.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-28959
URL Shortener <= 3.0.7 - Unauthenticated SQL Injection
Critical
CVE-2025-29009
Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-30959
Product XML Feed Manager for WooCommerce <= 2.9.2 - Missing Authorization
Medium
CVE-2025-5921
SureForms <= 1.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-49953
ShareBang, Ultimate Social Share Buttons for WordPress <= 1.4 - Reflected Cross-Site Scripting
Critical
CVE-2025-60235
Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload
Medium
CVE-2021-4458
Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
Critical
CVE-2025-49901
Simple Link Directory < 14.8.1 - Authentication Bypass
Critical
CVE-2025-31070
HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-49951
gAppointments <= 1.14.1 - Reflected Cross-Site Scripting
Critical
CVE-2025-52836
The E-Commerce ERP <= 2.1.1.3 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.