High
CVE-2025-11517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-11519
Image optimization service by Optimole <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Media Offload
Medium
CVE-2025-11703
WP Go Maps (formerly WP Google Maps) <= 9.0.48 - Unauthenticated Cache Poisoning
Medium
CVE-2025-9562
Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
Medium
CVE-2025-11738
Media Library Assistant <= 3.29 - Unauthenticated Limited File Read
Medium
CVE-2025-11361
Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery
Medium
CVE-2025-11378
ShortPixel Image Optimizer <= 6.3.4 - Authenticated (Contributor+) Settings Import/Export
High
CVE-2025-59134
Sale! Immigration law, Visa services support, Migration Agent Consulting <= 1.5.8 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-11270
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-64189
XStore Core < 5.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-48087
Memberlite Shortcodes <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-11742
WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-11926
Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-11857
XX2WP Integration Tools <= 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-10187
GSpeech TTS – WordPress Text To Speech Plugin <= 3.17.13 - Authenticated (Admin+) SQL injection
Medium
CVE-2025-62965
Admin Management Xtended <= 2.5.1 - Missing Authorization
Medium
CVE-2025-62966
GoCache <= 1.3.6 - Missing Authorization
Medium
CVE-2025-11895
Binary MLM Plan <= 5.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-62062
Easy Post Submission <= 1.7.0 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-62059
SureRank <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-62960
Construction Light <= 1.6.7 - Missing Authorization
Medium
CVE-2025-62072
Front End Users <= 3.2.33 - Missing Authorization
Medium
CVE-2025-62032
tagDiv Cloud Library < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-62008
Product Table For WooCommerce <= 1.2.4 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.