Medium
CVE-2025-54698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Medium
CVE-2025-54673
Chartify <= 3.5.3 - Cross-Site Request Forgery
Medium
CVE-2025-54704
Easy Elementor Addons <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54674
Product Configurator for WooCommerce <= 1.4.4 - Cross-Site Request Forgery
Medium
CVE-2025-54705
WpEvently <= 4.4.6 - Missing Authorization
Medium
CVE-2025-8401
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
Medium
CVE-2025-54667
myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race Condition
Medium
CVE-2025-47536
Content Egg <= 7.0.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2025-8151
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
High
CVE-2025-8213
NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2025-52801
TheBooking <= 1.4.4 - Missing Authorization
High
CVE-2025-54052
Realtyna Organic IDX plugin <= 5.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54702
Ebook Store <= 5.8013 - Cross-Site Request Forgery
Medium
CVE-2025-54671
oik <= 4.15.2 - Cross-Site Request Forgery
High
CVE-2025-25174
BeeTeam368 Extensions <= 1.9.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54684
Integration for Contact Form 7 and Constant Contact <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-54676
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54706
Magical Posts Display <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54668
myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54681
Connector for Gravity Forms and Google Sheets <= 1.2.4 - Open Redirect
Medium
CVE-2025-54699
Masteriyo - LMS <= 1.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54696
WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-45346
Bacula-web SQL Injection Vulnerability
High
CVE-2025-52490
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.