Medium
CVE-2025-63059
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-11587
Call Now Button <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update
Medium
CVE-2025-11705
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2015-10147
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
High
CVE-2025-64353
Polylang <= 3.7.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-66525
Elastic Email Sender <= 1.2.20 - Missing Authorization
Medium
CVE-2025-62086
Яндекс Доставка (Boxberry) <= 2.32 - Missing Authorization
High
CVE-2025-64231
Contact Form 7 PDF, Google Sheet & Database <= 3.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-11154
IDonate < 2.1.13 - Missing Authorization
Critical
CVE-2024-50503
User Toolkit <= 1.2.3 - Unauthenticated Privilege Escalation
Medium
CVE-2025-12450
LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2015-10146
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
High
CVE-2025-68066
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-11735
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter
Medium
CVE-2025-64356
Insert PHP Code Snippet <= 1.4.3 - Missing Authorization
High
CVE-2025-49905
Range Slider Addon for Gravity Forms <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-62103
Media Library File Download <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-49920
Web Accessibility By accessiBe <= 2.10 - Missing Authorization
High
CVE-2025-64359
Consulting < 6.7.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-9501
W3 Total Cache <= 2.8.12 - Unauthenticated Command Injection
Medium
CVE-2025-64202
Sahifa < 5.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49351
Create Posts & Terms <= 1.3.1 - Cross-Site Request Forgery
High
CVE-2025-64360
Consulting Elementor Widgets <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-63037
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.