Critical
CVE-2025-47453
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2025-39490
Backpack Traveler <= 2.10.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-31913
Ogami <= 1.53 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32289
Yozi <= 2.0.63 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48123
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Critical
CVE-2025-39506
Nasa Core <= 6.3.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32302
Winnex <= 1.3.2 - Unauthenticated Local File Inclusion
High
CVE-2025-31053
KBx Pro Ultimate < 8.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-47670
WordPress Social Login and Register <= 7.6.10 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48126
Essential Real Estate <= 5.2.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-4524
Madara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48290
Multiple Themes by bslthemes <= Various Version - Unauthenticated Local File Inclusion
High
CVE-2025-47663
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-60223
WPBot Pro Wordpress Chatbot <= 13.6.5 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-3812
WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-4389
Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-4391
Echo RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-47512
Tainacan <= 0.21.14 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-39492
WHMpress <= 6.2-revision-9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-39507
Nasa Core < 6.4.4 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-48136
Mortgage Calculator Estatik <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-39491
WHMpress <= 6.2-revision-9 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32304
WPCHURCH <= 2.7.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-47641
Printcart Web to Print Product Designer for WooCommerce <= 2.3.9 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.