High
CVE-2025-2807
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2025-2004
Simple WP Events <= 1.8.17 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-3431
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
High
CVE-2025-32215
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-32209
Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download
Critical
CVE-2025-2941
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move
High
CVE-2025-32118
CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-32141
MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-2525
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-32157
Sparkle Elementor Kit <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32137
s2Member <= 250419 - Authenticated (Administrator+) Local File Inclusion
High
CVE-2025-32154
Catch Dark Mode <= 2.0.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32156
Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32155
Beds24 Online Booking <= 2.0.28 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32159
Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32151
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32160
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32152
Slider a SlidersPack <= 2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32142
Motors <= 1.4.71 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32146
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-31405
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
High
CVE-2025-32153
VG WooCarousel <= 1.3 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-30582
DyaPress ERP/CRM <= 18.0.2.0 - Unauthenticated Local File Inclusion
High
CVE-2025-32150
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.