Critical
CVE-2025-7634
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2025-7526
WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming
High
CVE-2025-58953
Joly <= 1.22.0 - Unauthenticated Local File Inclusion
High
CVE-2025-10494
Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-59550
Xcare < 6.5 - Unauthenticated Local File Inclusion
High
CVE-2025-58952
Neuronet < 1.14.0 - Unauthenticated Local File Inclusion
High
CVE-2025-63074
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-10874
Orbit Fox by ThemeIsle <= 3.0.1 - Authenticated (Author+) Server-Side Request Forgery
Critical
CVE-2025-10726
WPRecovery <= 2.0 - Unauthenticated SQL Injection to Arbitrary File Deletion
High
CVE-2025-9212
WP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-7721
JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion
High
CVE-2025-9561
AP Background 3.8.1 - 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload via advParallaxBackAdminSaveSlider Function
Critical
CVE-2025-62023
s2Member <= 250905 - Unauthenticated Remote Code Execution
High
CVE-2025-58959
Taskbot <= 6.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-10735
Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
High
CVE-2025-10916
FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More < 1.0.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-9993
Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-9762
Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachments
Medium
CVE-2025-8559
All in One Music Player <= 1.3.1 - Authenticated (Contributor+) Path Traversal via theme Parameter
High
CVE-2025-9991
Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion
Medium
CVE-2025-10000
Qyrr – simply and modern QR-Code creation <= 2.0.7 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-58994
Greenify <= 2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68974
Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-68893
Image shrinker <= 1.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.