High
CVE-2025-4206
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-3419
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
High
CVE-2025-47636
List category posts <= 0.91.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47498
Hotel Booking <= 3.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47550
Instantio <= 3.3.16 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-47508
GamiPress <= 7.3.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47437
LiteSpeed Cache <= 7.0.1 - Authenticated (Editor+) Server-Side Request Forgery
High
CVE-2025-47649
Open Close WooCommerce Store <= 4.9.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47548
Wbcom Designs - Activity Link Preview For BuddyPress <= 1.4.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-47664
WP Pipes <= 1.4.3 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2025-47494
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47653
WP-Recall <= 16.26.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47635
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2025-4190
CSV Mass Importer <= 1.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-47439
Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47549
BEAF <= 4.6.10 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-47531
XT Event Widget for Social Events <= 1.1.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47484
Display Remote Posts Block <= 1.1.0 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-47510
Display Eventbrite Events <= 6.2.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47496
PublishPress Authors <= 4.7.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47440
WPAdverts <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47464
Solace Extra <= 1.3.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-47483
Easy Replace Image <= 3.5.0 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-4279
External image replace <= 1.0.8 - Authenticated (Contributor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.