High
CVE-2025-23968
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-6238
AI Engine 2.8.4 - Insecure OAuth Implementation
Medium
CVE-2024-5647
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
High
CVE-2025-60241
Premmerce <= 1.3.19 - Unauthenticated Local File Inclusion
High
CVE-2025-60210
Everest Forms - Frontend Listing <= 1.0.5 - Unauthenticated PHP Object Injection
High
CVE-2025-6464
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion
Critical
CVE-2025-4689
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
High
CVE-2025-4380
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
Medium
CVE-2024-11405
WP Front-end login and register <= 2.1.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-5746
Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload
High
CVE-2025-53198
Houzez <= 4.0.4 - Unauthenticated Local File Inclusion
High
CVE-2025-53204
Event List <= 1.9.2 - Unauthenticated Local File Inclusion
High
CVE-2025-52805
Leyka <= 3.31.9 - Unauthenticated Local File Inclusion
High
CVE-2025-49417
WooCommerce Product Multi-Action <= 1.3 - Unauthenticated PHP Object Injection
High
CVE-2025-5804
Case Theme User < 1.0.4 - Unauthenticated Local File Inclusion
High
CVE-2025-53207
WP Travel Gutenberg Blocks <= 3.9.0 - Unauthenticated Local File Inclusion
High
CVE-2025-52723
Networker <= 1.2.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-52725
CouponXxL <= 3.0.0 - Unauthenticated PHP Object Injection
High
CVE-2025-52807
Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Unauthenticated Local File Inclusion
High
CVE-2025-49070
Elessi < 6.4.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-4414
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion
High
CVE-2025-47627
PrivateContent - Mail Actions <= 2.3.2 - Unauthenticated Local File Inclusion
High
CVE-2025-52724
Amwerk <= 1.2.0 - Unauthenticated PHP Object Injection
High
CVE-2025-52729
Diza <= 1.3.9 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.