Medium
CVE-2025-48272
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-48259
WP Mapa Politico España <= 3.8.0 - Cross-Site Request Forgery
Critical
CVE-2025-31069
HotStar – Multi-Purpose Business Theme <= 1.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-3581
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-2892
All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL
High
CVE-2025-3812
WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-48134
WP Tabs <= 2.2.12 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-47512
Tainacan <= 0.21.14 - Unauthenticated Arbitrary File Deletion
High
CVE-2024-13613
Wise Chat <= 3.3.3 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Critical
CVE-2025-47581
WordPress Events Calendar Registration & Tickets <= 2.6.0 - Unauthenticated PHP Object Injection
High
CVE-2025-39492
WHMpress <= 6.2-revision-9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-48138
BERTHA AI <= 1.12.11 - Missing Authorization
High
CVE-2025-39507
Nasa Core < 6.4.4 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-48136
Mortgage Calculator Estatik <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47660
WC Affiliate <= 2.16 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-39491
WHMpress <= 6.2-revision-9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-4101
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
Critical
CVE-2025-32304
WPCHURCH <= 2.7.0 - Unauthenticated Local File Inclusion
High
CVE-2025-32310
QuickCal <= 1.0.15 - Cross-Site Request Forgery to Privilege Escalation
High
CVE-2025-60248
WPC Product Options for WooCommerce < 3.1.3 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-47693
FAT Services Booking <= 5.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-4169
Posts per Cat [Unmaintained] <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-3917
百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.0.6 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-47582
WPBot Pro Wordpress Chatbot <= 12.7.0 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.