Medium
CVE-2025-64273
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-58592
TranslatePress <= 2.10.2 - Unauthenticated PHP Object Injection
High
CVE-2025-10406
BlindMatrix e-Commerce = 3.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-59007
TF Woo Product Grid Addon For Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-59580
Goodlayers Core < 2.1.7 - Authenticated (Contributor+) Privilege Escalation
High
CVE-2025-60216
Addison < 1.4.8 - Unauthenticated PHP Object Injection
Critical
CVE-2025-9054
MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'
High
26654f89-38ae-480c-9851-08a6bf0f6d84
Houzez Theme - Functionality <= 4.1.2 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2025-49393
Sign-up Sheets <= 2.3.2 - Unauthenticated PHP Object Injection
High
CVE-2025-54723
DentiCare < 1.4.3 - Unauthenticated PHP Object Injection
High
CVE-2025-60214
Goldenblatt < 1.3.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-9698
The Plus Addons for Elementor <= 6.3.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
High
CVE-2025-58024
Accordion FAQ <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-59562
Academy LMS <= 3.3.4 - Authenticated (Academy Instructor+) Insecure Direct Object Reference
Medium
CVE-2025-58678
Accordion <= 2.3.15 - Missing Authorization
Medium
CVE-2025-58019
Search Atlas SEO <= 2.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-57992
Mail Baby SMTP <= 2.8 - Cross-Site Request Forgery
Medium
CVE-2025-58649
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2025-58973
Easy Elementor Addons <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-58662
Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection
Medium
CVE-2025-58028
Designil PDPA Thailand <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53466
Better Find and Replace <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58269
WP Project Manager <= 2.6.25 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-58033
Draft <= 3.0.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.