Medium
CVE-2025-12590
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-11532
Wisly <= 1.0.0 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation
Medium
CVE-2025-11822
WP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-12632
RandomQuotr <= 1.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-11856
Eventbee Ticketing Widget <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-12637
Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-11859
Paypal Donation Shortcode <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-12651
Live Photos on WordPress <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2025-11170
WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-11997
Document Pro Elementor – Documentation & Knowledge Base <= 1.0.9 - Unauthenticated Information Exposure
High
CVE-2025-12613
Cloudinary Node SDK is vulnerable to Arbitrary Argument Injection through parameters that include an ampersand
Medium
CVE-2025-67912
Stars Testimonials <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49379
Custom Fields Account Registration For Woocommerce <= 1.2 - Authenticated (Author+) Privilege Escalation
Low
CVE-2025-12919
EverShop is vulnerable to Unauthorized Order Information Access (IDOR)
Low
CVE-2025-12918
Skuul School Management System has an Insecure Direct Object Reference (IDOR) Vulnerability in View Fee Invoice
Medium
CVE-2025-64267
WooCommerce Ultimate Points And Rewards <= 2.10.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-64222
WooCommerce Recover Abandoned Cart <= 24.6.0 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-66059
Seriously Simple Podcasting <= 3.13.0 - Unauthenticated Information Exposure
Medium
CVE-2025-67548
WP Delicious <= 1.9.1 - Missing Authorization
Medium
CVE-2025-64258
Follow My Blog Post <= 2.3.9 - Unauthenticated Information Exposure
High
CVE-2025-68065
Hub Core <= 5.0.8 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-66060
Seriously Simple Podcasting <= 3.13.0 - Missing Authorization
Medium
CVE-2025-49914
Restaurant Menu by MotoPress <= 2.4.7 - Authenticated (Subscriber+) Information Exposure
Low
CVE-2025-49300
Traveler Option Tree <= 2.8 - Authenticated (Editor+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.