Medium
CVE-2025-27311
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-26969
Private Content <= 8.11.5 - Missing Authorization
Medium
CVE-2025-1063
Classified Listing – Classified ads & Business Directory Plugin <= 4.0.4 - Unauthenticated Settings Exposure
High
CVE-2025-27272
VG PostCarousel <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-27307
Quotes llama <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1262
Advanced Google reCaptcha <= 1.27 - Built-in Math CAPTCHA Bypass
Medium
CVE-2025-27349
Get Posts <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26924
Ohio Extra <= 3.4.7 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-27320
Profile Widget Ninja <= 4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26897
List Related Attachments <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-26936
Fresh Framework <= 1.70.0 - Unauthenticated Remote Code Execution
Medium
CVE-2025-27325
Video.js HLS Player <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-26978
FS Poster <= 6.5.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-27304
Contact Form 7 Star Rating with font Awesome <= 1.3 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-27277
Add Linked Images To Gallery <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-27329
EZ InLinkz linkup <= 0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26976
Private Content <= 8.11.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-27300
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2024-13695
Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id
Medium
CVE-2025-27312
WP Sitemap <= 1.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-27294
WP-Asambleas <= 2.85.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-27327
Live Streaming Video Player – by SRS Player <= 1.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26948
Pie Register Premium <= 3.8.3.2 - Missing Authorization
Medium
CVE-2025-27328
WP-PostRatings Cheater <= 1.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.