Critical
CVE-2025-39354
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Critical
CVE-2025-39356
Foodbakery Sticky Cart <= 3.2 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39348
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39349
CiyaShop <= 4.18.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-32927
WP FoodBakery <= 3.3 - Unauthenticated PHP Object Injection
Critical
CVE-2025-32926
Grand Restaurant WordPress <= 7.0 - Unauthenticated PHP Object Injection via Path Traversal
Critical
CVE-2025-1093
AIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image
High
CVE-2025-3520
Avatar <= 0.1.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-39410
Smart Sections Theme Builder - WPBakery Page Builder Addon <= 1.7.8 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39550
FluentCommunity <= 1.2.15 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39588
Ultimate Store Kit Elementor Addons <= 2.4.0 - Unauthenticated PHP Object Injection
High
CVE-2025-39527
Rating by BestWebSoft <= 1.7 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-39434
Avatar <= 0.1.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Critical
CVE-2025-39551
FluentBoards <= 1.47 - Unauthenticated PHP Object Injection
Medium
CVE-2025-32688
Target Video Easy Publish <= 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
High
CVE-2025-39565
MelaPress Login Security <= 2.1.0 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2025-32658
HelpGent <= 2.2.4 - Unauthenticated PHP Object Injection
High
CVE-2025-39533
Starfish Review Generation & Marketing <= 3.1.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2025-32686
Team Members <= 3.4.4 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2025-32572
Kata Plus <= 1.5.3 - Unauthenticated PHP Object Injection
High
CVE-2025-32662
uListing <= 2.2.0 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-32571
TuriTop Booking System <= 1.0.11 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-32647
Question Answer <= 1.2.70 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-32607
WpBookingly <= 1.3.1 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.