Critical
CVE-2025-49330
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2025-49856
Responsive Plus <= 3.2.2 - Cross-Site Request Forgery to Settings Update
High
CVE-2025-31919
Spare <= 1.7 - Unauthenticated PHP Object Injection
High
CVE-2025-47579
Photography <= 7.5.2 - Unauthenticated PHP Object Injection
Critical
CVE-2025-49507
CozyStay < 1.7.1 - Unauthenticated PHP Object Injection
High
CVE-2025-31047
Themify Edmin <= 2.0.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-49455
TinySalt < 3.10.0 - Unauthenticated PHP Object Injection
High
CVE-2025-3055
WP User Frontend Pro <= 4.1.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-31429
PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Unauthenticated PHP Object Injection
Critical
CVE-2025-49073
Sweet Dessert < 1.1.13 - Unauthenticated PHP Object Injection
Critical
CVE-2025-31398
PIMP - Creative MultiPurpose <= 1.7 - Unauthenticated PHP Object Injection
Critical
CVE-2025-31396
FLAP - Business WordPress Theme <= 1.5 - Unauthenticated PHP Object Injection
High
CVE-2025-49072
Mr. Murphy - Custom Dress Tailoring Clothing WordPress Theme < 1.2.12.1 - Unauthenticated PHP Object Injection
High
CVE-2025-4103
WP-GeoMeta 0.3.4 - 0.3.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via wp_ajax_wpgm_start_geojson_import Function
High
CVE-2025-32283
Solar Energy <= 3.5 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-47601
MaxiBlocks <= 2.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update
Critical
CVE-2025-31052
The Fashion - Model Agency One Page Beauty Theme <= 1.4.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48335
Responsive Plus <= 3.2.0 - Missing Authorization
High
CVE-2025-39358
WP Posts Carousel <= 1.3.12 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2025-48336
Course Builder - Online Course WordPress Theme < 3.6.6 - Unauthenticated PHP Object Injection
Medium
CVE-2025-4955
tarteaucitron.io <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-31927
Mulitple Themes by Themeton <= (Various Versions) - Unauthenticated PHP Object Injection
Critical
CVE-2025-39480
Car Dealer < 1.6.7 - Unauthenticated PHP Object Injection
High
CVE-2025-47584
Photography <= 7.5.2 - Authenticated (Subscriber+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.