Medium
CVE-2025-11692
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-10140
Quick Social Login <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-10041
Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-10294
OwnID Passwordless Login <= 1.3.4 - Authentication Bypass
High
CVE-2025-11501
Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection
Medium
CVE-2025-11161
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via vc_custom_heading Shortcode
Medium
CVE-2025-11160
WPBakery Page Builder <= 8.6.1 - Stored Cross-Site Scripting via Custom JS Module
Medium
CVE-2025-11176
Quick Featured Images <= 13.7.2 - Insecure Direct Object Reference to Image Manipulation
Medium
CVE-2025-8561
Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2025-6042
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Unauthenticated Privilege Escalation to Editor
High
CVE-2025-11746
XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-62953
Welcart e-Commerce <= 2.11.24 - Missing Authorization
Medium
CVE-2025-62955
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2026-28070
eMember <= 10.2.2 - Missing Authorization
Medium
CVE-2025-11260
WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass
Medium
CVE-2025-59579
Simple Job Board <= 2.13.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-49935
WoodMart < 8.3.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-49909
Penci Bookmark & Follow < 2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31029
replyMail <= 1.2.0 - Cross-Site Request Forgery
High
CVE-2025-62047
Case Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-62954
Revive Old Posts <= 9.3.3 - Missing Authorization
Medium
CVE-2025-10732
SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure
High
CVE-2025-62045
TheGem Theme Elements (for WPBakery) <= 5.10.5.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62952
ChatBot <= 7.7.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.