High
CVE-2025-9693
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-8417
Catalog Importer, Scraper & Crawler <= 5.1.4 - Unauthenticated PHP Code Injection
High
CVE-2025-64193
XStore < 9.6.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-10049
Responsive Filterable Portfolio <= 1.0.24 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-7843
Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-10001
Import any XML, CSV or Excel File to WordPress <= 3.9.3 - Authenticated (Admin+) Limited Unsafe File Upload
Medium
CVE-2025-58977
WP eBay Product Feeds <= 3.4.8 - Authenticated (Contributor+) Server Side Request Forgery
Critical
CVE-2025-9113
Doccure Core <= 1.5.3 - Unauthenticated Arbitrary File Upload
High
CVE-2025-9112
Doccure <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-62016
Kallyas <= 4.22.0 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-58819
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-49362
Gracioza <= 1.0.15 - Unauthenticated Local File Inclusion
High
CVE-2025-49360
Militarology <= 1.0.15 - Unauthenticated Local File Inclusion
High
CVE-2025-49367
Monyxi <= 1.1.8 - Unauthenticated Local File Inclusion
High
CVE-2025-49361
Mamita <= 1.0.9 - Unauthenticated Local File Inclusion
High
CVE-2025-49371
Strux <= 1.9 - Unauthenticated Local File Inclusion
High
CVE-2025-49369
Lettuce <= 1.1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-9515
Multi Step Form <= 1.7.25 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-49363
Kings & Queens <= 1.1.16 - Unauthenticated Local File Inclusion
High
CVE-2025-49359
ShieldGroup <= 2.13 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58829
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.3.9 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-49365
Jack Well <= 1.0.14 - Unauthenticated Local File Inclusion
High
CVE-2025-49364
Ludos Paradise <= 2.1.3 - Unauthenticated Local File Inclusion
High
CVE-2025-49368
Palladio <= 1.1.10 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.