High
CVE-2025-49383
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-7812
Video Share VOD – Turnkey Video Site Builder Script <= 2.7.6 - Cross-Site Request Forgery to Command Injection
Medium
CVE-2025-58203
Solace Extra <= 1.3.2 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2025-49405
Houzez <= 4.1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-54029
WooCommerce csv import export <= 2.0.6 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-49403
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-49387
Drag and Drop File Upload for Elementor Forms <= 1.5.3 - Unauthenticated Arbitrary File Upload
High
CVE-2025-48090
Blanka - One Page WordPress < 1.5 - Unauthenticated Local File Inclusion
High
CVE-2025-53328
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-53250
Chartbeat <= 2.0.7 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-53326
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
High
CVE-2025-53588
UPC/EAN/GTIN Code Generator <= 2.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-48100
bidorbuy Store Integrator <= 2.12.0 - Authenticated (Admin+) Remote Code Execution
High
CVE-2025-53227
Magazine Saga <= 1.2.7 - Unauthenticated Local File Inclusion
High
CVE-2025-53334
Jannah < 7.5.1 - Unauthenticated Local File Inclusion
High
58df5dc1-c56a-43ba-ad5a-b700351b42dc
Nuss <= 1.3.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-8562
Custom Query Shortcode <= 0.4.0 - Authenticated (Contributor+) Path Traversal via lens Parameter
High
CVE-2025-52756
WP Last Modified Info <= 1.9.4 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2025-58890
Playful <= 1.19.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58900
UniTravel <= 1.4.2 - Unauthenticated Local File Inclusion
High
CVE-2025-58896
Otaku <= 1.8.0 - Unauthenticated Local File Inclusion
High
CVE-2025-60042
Chinchilla <= 1.16 - Unauthenticated Local File Inclusion
High
CVE-2025-58901
Takeout <= 1.3.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58891
Sanger <= 1.24.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.