Critical
CVE-2025-6027
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-10873
Elementinvader Addons for Elementor <= 1.4.0 - Unauthenticated Arbitrary Email Sending
High
CVE-2025-11072
Download Counter Button <= 1.8.6.7 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-62956
Reloadly <= 2.0.1 - Cross-Site Request Forgery
High
CVE-2025-62050
Blogmatic <= 1.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-63062
UDesign Core <= 4.14.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-59556
GoStore < 1.6.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-62049
Cost Calculator Builder <= 3.5.32 - Missing Authorization
Medium
CVE-2025-62957
NikanWP WooCommerce Reporting <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-10567
FunnelKit <= 3.12.0 - Reflected Cross-Site Scripting
High
CVE-2025-59578
Free Follow-Up Emails & Marketing Automation for WooCommerce – ShopMagic <= 4.5.6 - Unauthenticated Information Exposure
Medium
CVE-2025-64236
Tuturn < 3.6 - Unauthenticated Missing Authorization
Medium
CVE-2025-64235
Tuturn < 3.6 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-62005
SUMO Memberships for WooCommerce < 7.8.0 - Cross-Site Request Forgery
Medium
CVE-2025-10038
Binary MLM Plan <= 3.0 - Unauthenticated Limited Privilege Escalation
High
CVE-2025-10293
Keyy Two Factor Authentication (like Clef) <= 1.2.3 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Medium
CVE-2025-10660
WP Dashboard Chat <= 1.0.3 - Authenticated (Contributor+) SQL Injection via id
High
CVE-2025-10754
DocoDoco Store Locator <= 1.0.1 - Authenticated (Editor+) Arbitrary File Upload
High
CVE-2025-10313
Find And Replace content for WordPress <= 1.1 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-10486
Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File
Medium
CVE-2025-10141
Digiseller <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-11722
Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-10139
WP BookWidgets <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-10682
TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.