Medium
CVE-2025-39546
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-39553
Church Admin <= 5.0.9 - Unauthenticated Information Disclosure
Medium
CVE-2025-39518
BMA Lite <= 1.4.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-39570
WPCOM Member <= 1.7.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-39592
Subscribe to Unlock Lite <= 1.3.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2026-15290
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL Injection
Medium
CVE-2025-39516
Author WIP Progress Bar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39523
GoodBarber <= 1.0.26 - Open Redirect
Medium
CVE-2025-39564
Conditional Shipping for WooCommerce <= 3.4.0 - Cross-Site Request Forgery
Medium
CVE-2025-39513
ActiveDEMAND <= 0.2.46 - Missing Authorization
Medium
CVE-2025-39531
Slazzer Background Changer <= 3.14 - Missing Authorization
Medium
CVE-2025-39590
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39593
Ever Accounting <= 2.1.5 - Cross-Site Request Forgery
Medium
CVE-2025-39522
Dynamic Post <= 5.03 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-39528
Rescue Shortcodes <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-39601
Custom CSS, JS & PHP <= 2.4.1 - Cross-Site Request Forgery to Remote Code Exectuiron
Medium
CVE-2025-39563
Conditional Payments for WooCommerce <= 3.3.0 - Cross-Site Request Forgery
High
CVE-2025-39471
Modal Survey <= 2.0.2.0.1 - Unauthenticated SQL Injection
Medium
CVE-2025-39547
Internal Link Optimiser <= 5.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-39517
Basic Interactive World Map <= 2.7 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-39585
Travelfic Toolkit <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39566
Hostel <= 1.1.5.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-39557
Kadence WooCommerce Email Designer <= 1.5.14 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-39589
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.