High
CVE-2025-60089
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-60174
Gravity Forms Constant Contact <= 1.1.2 - Unauthenticated PHP Object Injection
High
CVE-2025-58636
Gravity Forms Keap/Infusionsoft <= 1.2.3 - Unauthenticated PHP Object Injection
High
CVE-2025-60091
Gravity Forms Zoho CRM and Bigin <= 1.2.9 - Unauthenticated PHP Object Injection
High
CVE-2025-60178
Gravity Forms HubSpot <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-4796
Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
Critical
CVE-2025-49271
GravityWP - Merge Tags <= 1.4.4 - Unauthenticated Local File Inclusion
High
CVE-2025-60209
Connector for Gravity Forms and Google Sheets <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-60180
Gravity Forms Salesforce <= 1.5.1 - Unauthenticated PHP Object Injection
High
CVE-2025-48302
FundEngine <= 1.7.4 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-54028
CF7 WOW Styler <= 1.7.2 - Unauthenticated Local File Inclusion
High
CVE-2025-48169
Code Engine <= 0.3.3 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-49063
BaiduXZH Submit(百度熊掌号) <= 1.4.6 - Reflected Cross-Site Scripting
Medium
CVE-2026-22333
YITH WooCommerce Compare <= 3.6.0 - Authenticated (Admin+) PHP Object Injection
High
CVE-2025-53210
ZoloBlocks <= 2.3.2 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-54007
Post Grid and Gutenberg Blocks <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-54689
Urna <= 2.5.7 - Unauthenticated Local File Inclusion
High
CVE-2025-54690
Xinterio <= 4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6256
Flex Guten <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
Critical
CVE-2025-6994
Reveal Listing <= 3.3 - Unauthenticated Privilege Escalation
Medium
CVE-2025-8620
GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure
High
CVE-2025-49921
JetReviews <= 3.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-52740
Boldermail <= 2.4.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-54053
Groundhogg <= 4.2.2 - Authenticated (Sales Representative+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.