High
CVE-2025-24779
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2025-30973
CoSchool LMS <= 1.4.3 - Unauthenticated PHP Object Injection
High
CVE-2025-30949
Site Chat on Telegram <= 1.0.4 - Unauthenticated PHP Object Injection
High
CVE-2025-60238
UNIVERSAM < 9.08 - Unauthenticated PHP Object Injection
High
CVE-2025-60224
Subscribe to Download <= 2.0.9 - Unauthenticated PHP Object Injection
High
CVE-2025-5961
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-60210
Everest Forms - Frontend Listing <= 1.0.5 - Unauthenticated PHP Object Injection
High
CVE-2025-6464
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion
High
CVE-2025-49417
WooCommerce Product Multi-Action <= 1.3 - Unauthenticated PHP Object Injection
Critical
CVE-2025-52725
CouponXxL <= 3.0.0 - Unauthenticated PHP Object Injection
High
CVE-2025-52724
Amwerk <= 1.2.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-53296
EC Stars Rating <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-52828
Red Art <= 3.8 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-53303
ThemeMove Core <= 1.4.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60215
Kriya <= 3.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60212
VEDA <= 4.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-52826
Sala <= 1.1.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-31067
Seven Stars <= 1.4.4 - Reflected Cross-Site Scripting
High
CVE-2025-52827
Nuss <= 1.3.3 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-28970
WP Optimize By xTraffic <= 5.1.6 - Unauthenticated PHP Object Injection
Medium
CVE-2025-49331
eCommerce Product Catalog <= 3.4.3 - Authenticated (Orders manager+) PHP Object Injection
Medium
CVE-2025-49980
WP User Profile Avatar <= 1.0.6 - Missing Authorization
High
CVE-2025-4102
Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2025-5237
Target Video Easy Publish <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.