Critical
CVE-2025-32595
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Critical
CVE-2025-39473
Seofy Core <= 1.6.8 - Unauthenticated Local File Inclusion
High
CVE-2025-47569
WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates <= 2.9.6 - Unauthenticated SQL Injection
Critical
CVE-2025-31398
PIMP - Creative MultiPurpose <= 1.7 - Unauthenticated PHP Object Injection
Critical
CVE-2025-31396
FLAP - Business WordPress Theme <= 1.5 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39476
Revo <= 4.0.26 - Unauthenticated Local File Inclusion
Critical
CVE-2025-47586
Motors - Events <= 1.4.7 - Unauthenticated Local File Inclusion
Critical
CVE-2025-39475
Arlo <= 6.0.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-4420
Vayu Blocks <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter
Medium
CVE-2025-5116
WP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter
Critical
CVE-2025-4797
Golo <= 1.7.0 - Authentication Bypass to Account Takeover
Medium
CVE-2025-3919
WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-48133
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.4.0.2 - Missing Authorization
High
CVE-2025-49072
Mr. Murphy - Custom Dress Tailoring Clothing WordPress Theme < 1.2.12.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-2939
Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
Medium
CVE-2025-4691
Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure
Medium
CVE-2025-4590
Daisycon prijsvergelijkers <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-4631
Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint
Critical
CVE-2025-48330
Real Time Validation for Gravity Forms <= 1.7.0 - Unauthenticated Local File Inclusion
High
CVE-2025-48124
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Arbitrary File Download
High
CVE-2025-31643
WPCHURCH <= 2.7.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-49076
The Plus Addons for Elementor Page Builder Lite <= 6.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-4857
Newsletters <= 4.9.9.9 - Authenticated (Administrator+) Local File Inclusion
High
CVE-2025-32283
Solar Energy <= 3.5 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.