High
CVE-2024-54263
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-8268
Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion
Medium
CVE-2025-3701
Malcure Malware Scanner <= 16.8 - Missing Authorization
Medium
CVE-2025-58596
MailOptin <= 1.2.75.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58644
LTL Freight Quotes - TQL Edition <= 1.2.6 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-58643
LTL Freight Quotes – Daylight Edition <= 2.2.7 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-57889
InPost Gallery <= 2.1.4.5 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-48338
Abstracts <= 2.7.4 - Unauthenticated Local File Inclusion
High
CVE-2025-58608
MediaPress <= 1.5.9.1 - Authenticated (Contributor+) Local File Inclusion
Low
CVE-2025-58598
Klarna Order Management for WooCommerce <= 1.9.8 - Authenticated (Shop Manager+) Information Disclosure via Log Files
Medium
CVE-2025-58601
Classified Listing <= 5.0.6 - Missing Authorization
High
CVE-2025-58637
immonex Kickstart <= 1.11.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-58642
LTL Freight Quotes – Day & Ross Edition <= 2.1.11 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-10269
Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-58635
Support Genix <= 1.4.23 - Missing Authorization
Medium
CVE-2025-58600
Paid Member Subscriptions <= 2.15.9 - Missing Authorization
Medium
CVE-2025-58604
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-49401
Quiz And Survey Master <= 10.2.5 - Unauthenticated PHP Object Injection
Medium
CVE-2025-9260
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
Medium
CVE-2025-8282
SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-53445
Catwalk <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2025-58945
EcoGrow <= 1.7 - Unauthenticated Local File Inclusion
High
CVE-2025-53448
Rally <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-58803
Algenix <= 1.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.