Medium
CVE-2025-4208
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-3419
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
High
CVE-2025-47636
List category posts <= 0.91.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47459
WP Fundraising Donation and Crowdfunding Platform <= 1.7.3 - Cross-Site Request Forgery
Medium
CVE-2025-47606
Simple Giveaways <= 2.48.2 - Cross-Site Request Forgery
High
CVE-2025-47498
Hotel Booking <= 3.6 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-47532
CoinPayments.net Payment Gateway for WooCommerce <= 1.0.17 - Unauthenticated PHP Object Injection
Medium
CVE-2025-47495
Blockspare <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-47629
WP-CRM System <= 3.4.5 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-47508
GamiPress <= 7.3.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47683
WP Maintenance <= 6.1.9.7 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-47649
Open Close WooCommerce Store <= 4.9.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47519
Easy PayPal Events <= 1.2.2 - Cross-Site Request Forgery
High
CVE-2025-47494
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47653
WP-Recall <= 16.26.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47587
YaySMTP <= 2.6.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-47547
SendPulse Email Marketing Newsletter <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47684
Smaily for WP <= 3.1.6 - Cross-Site Request Forgery
High
CVE-2025-47439
Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47490
Ultimate WP Mail <= 1.3.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-47485
Cozy Blocks <= 2.1.22 - Missing Authorization
Medium
CVE-2025-47622
Email Notification on Login <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-47531
XT Event Widget for Social Events <= 1.1.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47470
GPT3 AI Content Writer <= 1.9.14 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.