Medium
CVE-2025-48354
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
Medium
CVE-2025-49408
Templately <= 3.2.7 - Authenticated (Author+) Information Disclosure
High
CVE-2025-60047
IPharm <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-60051
Rare Radio <= 1.0.15.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62889
King Addons for Elementor <= 51.1.62 - Missing Authorization
Medium
CVE-2025-62887
King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7499
BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
Medium
CVE-2025-7439
Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner button link
Medium
CVE-2025-7440
Anber Elementor Addon <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Carousel button link
Medium
CVE-2025-55714
JetElements For Elementor <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8867
Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-55712
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization
Medium
CVE-2025-8451
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Medium
CVE-2025-54712
Easy Elementor Addons <= 2.2.7 - Missing Authorization
Critical
CVE-2025-7384
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion
Medium
CVE-2025-8874
Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox
Medium
CVE-2025-8081
Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import
High
CVE-2025-6253
UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read
Medium
CVE-2025-8462
RT Easy Builder <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7399
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7498
Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
Medium
CVE-2025-8100
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
Medium
CVE-2025-49939
JetElements For Elementor <= 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54055
Druco <= 1.5.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.