High
CVE-2025-10162
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-10050
Developer Loggers for Simple History <= 0.5 - Authenticated (Admin+) Local File Inclusion
High
CVE-2025-58619
Falang multilanguage <= 1.3.65 - Unauthenticated PHP Object Injection
Medium
CVE-2025-10188
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Cross-Site Request Forgery to Arbitrary Directory Deletion in /wp-content
High
CVE-2025-10143
Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-53421
Accordion <= 2.3.14 - Missing Authorization
Medium
CVE-2025-9215
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-64200
Email Template Customizer for WooCommerce <= 1.2.17 - Authenticated (Shop manager+) Stored Cross-Site Scripting
Medium
CVE-2025-62895
Atarim <= 4.2.1 - Unauthenticated Information Exposure
High
CVE-2025-58967
Businext < 2.4.4 - Unauthenticated Local File Inclusion
High
CVE-2025-10176
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2025-59003
Multiple Plugins and Themes by inkthemes <= 1.1.8 - Unauthenticated Information Exposure
High
CVE-2025-64377
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
Medium
CVE-2025-64351
Rank Math SEO <= 1.0.252.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-64350
Rank Math SEO <= 1.0.252.1 - Missing Authorization
High
CVE-2025-8422
Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
High
CVE-2025-8425
My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2025-9874
Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-64193
XStore < 9.6.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-10040
WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Missing Authorization to Authenticated (Subscriber+) FTP/SFTP Credential Exposure
Medium
CVE-2025-10126
MyBrain Utilities <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-7049
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
High
CVE-2025-7718
Resideo Plugin for Resideo - Real Estate WordPress Theme <= 2.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Privilege Escalation via Account Takeover
Medium
CVE-2025-9979
Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.