Medium
CVE-2025-8878
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2025-7662
Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-8720
Plugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter
Medium
CVE-2025-54739
Nexter Blocks <= 4.5.4 - Missing Authorization
Medium
CVE-2025-53341
Stratus <= 4.2.5 - Missing Authorization
High
CVE-2025-49869
Eventin <= 4.0.31 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-54012
Welcart e-Commerce <= 2.11.16 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2025-8482
Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration
High
CVE-2025-60090
Gravity Forms Insightly <= 1.1.6 - Unauthenticated PHP Object Injection
High
CVE-2025-60089
Gravity Forms FreshDesk <= 1.3.5 - Unauthenticated PHP Object Injection
High
CVE-2025-60174
Gravity Forms Constant Contact <= 1.1.2 - Unauthenticated PHP Object Injection
High
CVE-2025-58636
Gravity Forms Keap/Infusionsoft <= 1.2.3 - Unauthenticated PHP Object Injection
High
CVE-2025-60091
Gravity Forms Zoho CRM and Bigin <= 1.2.9 - Unauthenticated PHP Object Injection
High
CVE-2025-60178
Gravity Forms HubSpot <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-60209
Connector for Gravity Forms and Google Sheets <= 1.2.6 - Unauthenticated PHP Object Injection
High
CVE-2025-60180
Gravity Forms Salesforce <= 1.5.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-22333
YITH WooCommerce Compare <= 3.6.0 - Authenticated (Admin+) PHP Object Injection
High
CVE-2025-54007
Post Grid and Gutenberg Blocks <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-52740
Boldermail <= 2.4.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-54053
Groundhogg <= 4.2.2 - Authenticated (Sales Representative+) PHP Object Injection
Medium
CVE-2025-52739
Sala <= 1.1.3 - Reflected Cross-Site Scripting
High
CVE-2025-60063
Rosalinda <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-53586
WeMusic <= 1.9.1 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-54719
Yogi - Health Beauty & Yoga <= 2.9.2 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.