Medium
CVE-2025-9029
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2025-62025
JobSearch < 3.0.8 - Unauthenticated PHP Object Injection
Medium
CVE-2025-7825
Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation
High
CVE-2025-49380
WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated PHP Object Injection
Medium
CVE-2025-68080
User Avatar - Reloaded <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-68038
Icegram Express Pro <= 5.9.13 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-58592
TranslatePress <= 2.10.2 - Unauthenticated PHP Object Injection
High
CVE-2025-59007
TF Woo Product Grid Addon For Elementor <= 1.0.1 - Unauthenticated PHP Object Injection
High
CVE-2025-60216
Addison < 1.4.8 - Unauthenticated PHP Object Injection
High
CVE-2025-53324
Gutenify <= 1.5.7 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-49393
Sign-up Sheets <= 2.3.2 - Unauthenticated PHP Object Injection
High
CVE-2025-54723
DentiCare < 1.4.3 - Unauthenticated PHP Object Injection
High
CVE-2025-60214
Goldenblatt < 1.3.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-58968
MaxiBlocks <= 2.1.3 - Missing Authorization
High
CVE-2025-58662
Awesome Support <= 6.3.5 - Authenticated (Support Manager+) PHP Object Injection
Medium
CVE-2025-53465
GSheets Connector <= 1.1.1 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-57925
immonex Kickstart Team <= 1.6.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-57919
Language Translate Widget for WordPress – ConveyThis <= 269.1 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-64266
Booking and Rental Manager <= 2.5.4 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-58619
Falang multilanguage <= 1.3.65 - Unauthenticated PHP Object Injection
Medium
CVE-2025-62895
Atarim <= 4.2.1 - Unauthenticated Information Exposure
High
CVE-2025-60213
Scape <= 1.5.13 - Unauthenticated PHP Object Injection
High
CVE-2025-49360
Militarology <= 1.0.15 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58815
Aitasi Coming Soon <= 2.0.2 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.