Critical
CVE-2025-39463
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-26968
Cloak Front End Email <= 1.9.5 - Missing Authorization
Critical
CVE-2025-39429
Széchenyi 2020 Logo <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-39527
Rating by BestWebSoft <= 1.7 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-39458
Foton <= 2.5.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-39411
WhatsApp Click to Chat Plugin for WordPress <= 2.2.12 - Unauthenticated Local File Inclusion
Critical
CVE-2025-39551
FluentBoards <= 1.47 - Unauthenticated PHP Object Injection
Medium
CVE-2025-39583
BERTHA AI <= 1.12.10.2 - Authenticated (Subscriber+) Arbitrary Content Deletion
Critical
CVE-2025-39461
Docket Cache <= 24.07.02 - Unauthenticated Local File Inclusion
High
CVE-2025-39452
WPCafe <= 2.2.32 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-3479
Forminator <= 1.42.0 - Order Replay Vulnerability
Critical
CVE-2025-39468
Modal Survey <= 2.0.2.0.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-39599
Listdom <= 4.0.0 - Open Redirect
High
CVE-2025-39565
MelaPress Login Security <= 2.1.0 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-39544
WP Tools <= 5.18 - Cross-Site Request Forgery to Arbitrary File Renaming
Critical
CVE-2025-32658
HelpGent <= 2.2.4 - Unauthenticated PHP Object Injection
High
CVE-2025-39570
WPCOM Member <= 1.7.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-39592
Subscribe to Unlock Lite <= 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-39522
Dynamic Post <= 5.03 - Missing Authorization to Authenticated (Subscriber+) Settings Update
High
CVE-2025-39557
Kadence WooCommerce Email Designer <= 1.5.14 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-39584
Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-39533
Starfish Review Generation & Marketing <= 3.1.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-3247
Contact Form 7 <= 6.0.5 - Order Replay Vulnerability
Medium
CVE-2025-32635
Hive Support <= 1.2.6 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.