Medium
CVE-2025-6252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,089
Reset filters
High
CVE-2025-53339
Devnex Addons For Elementor <= 1.0.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-53199
HT Slider For Elementor <= 1.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6550
The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5338
Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-3863
Post Carousel Slider for Elementor <= 1.6.0 - Authenticated (Subscriber+) Missing Authorization via process_wbelps_promo_form Function
Critical
CVE-2025-49879
Litho <= 3.0 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-32281
WPKit For Elementor <= 1.1.0 - Missing Authorization to Unauthenticated Arbitrary Options Update
Critical
CVE-2025-24769
Zenny <= 1.7.5 - Unauthenticated Local File Inclusion
High
CVE-2025-24760
Sofass <= 1.3.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-50038
Anant Addons for Elementor <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-50009
Kata Plus <= 1.5.3 - Missing Authorization
Medium
CVE-2024-50555
Elementor Website Builder <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-4479
ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
Critical
CVE-2025-49330
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.3.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-5938
Digital Marketing and Agency Templates Addons for Elementor <= 1.1.1 - Cross-Site Request Forgery to Import
Medium
CVE-2025-49875
If-So Dynamic Content Personalization <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49856
Responsive Plus <= 3.2.2 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2025-49254
Nika <= 1.2.8 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49257
Zota <= 1.3.8 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49261
Diza <= 1.3.8 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49252
Besa <= 2.3.8 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49444
Reformer for Elementor <= 1.0.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-49260
Aora <= 1.3.9 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.