Critical
CVE-2025-39551
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-39403
WPAMS <= 44.0 (17-08-2023) - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-39445
Super Store Finder <= 7.2 - Unauthenticated SQL Injection
Medium
CVE-2025-39556
Mediavine Control Panel <= 2.10.6 - Unauthenticated Information Exposure
Medium
CVE-2025-39553
Church Admin <= 5.0.9 - Unauthenticated Information Disclosure
Medium
CVE-2025-39518
BMA Lite <= 1.4.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-15290
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin <= 2.10.1 - Unauthenticated Blind SQL Injection
High
CVE-2025-39471
Modal Survey <= 2.0.2.0.1 - Unauthenticated SQL Injection
Medium
CVE-2025-39566
Hostel <= 1.1.5.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-39589
Essential Addons for Elementor <= 6.1.9 - Authenticated (Contributor+) Information Disclosure
High
CVE-2025-39587
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection
Medium
CVE-2025-3453
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-32635
Hive Support <= 1.2.6 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-32665
Office Locator <= 1.3.0 - Unauthenticated SQL Injection
Medium
CVE-2025-26730
Macro Calculator with Admin Email Optin & Data <= 1.0 - Unauthenticated Information Disclosure
Medium
CVE-2025-32573
KiotViet Sync <= 1.8.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-32626
JS Job Manager <= 2.0.2 - Unauthenticated SQL Injection
Medium
CVE-2025-3470
TS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' Parameter
High
CVE-2025-32636
Local Magic <= 2.6.0 - Unauthenticated SQL Injection
Medium
CVE-2025-26908
Kargo Entegratör <= 1.1.14 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2025-2541
WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2025-2128
Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
Medium
CVE-2025-62077
Affiliate Link Tracker <= 0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-32594
Simple WP Events <= 1.8.17 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.