Medium
CVE-2025-9496
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-53218
AppExperts <= 1.4.5 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-48098
Survey Maker <= 5.1.8.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-62029
Grevo <= 2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62937
Post List Featured Image <= 0.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49937
Smash Balloon Social Post Feed <= 4.3.2 - Missing Authorization
High
CVE-2025-62031
tagDiv Composer <= 5.4.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-63065
Media Library Assistant <= 3.29 - Missing Authorization
Medium
CVE-2025-58595
WordPress All In One Login Plugin <= 2.0.8 - IP Sooofing to Protection Mechanism Bypass
Medium
CVE-2025-62938
Reoon Email Verifier <= 2.0.1 - Missing Authorization
Medium
CVE-2025-68079
Salient Shortcodes <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48095
Survey Maker <= 5.1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-68078
Salient Portfolio <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7374
WP JobHunt <= 7.6 Authenticated (Custom+) Authorization Bypass
Medium
CVE-2025-7781
WP JobHunt <= 7.6 - Authenticated (Candidate+) Stored Cross-Site Scripting via ‘cs_job_title’
Critical
CVE-2025-7634
WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion
Critical
CVE-2025-7526
WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming
High
CVE-2025-6038
Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme <= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-10496
Cookie Notice & Consent <= 1.6.5 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-11166
WP Go Maps (formerly WP Google Maps) <= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update
Critical
CVE-2025-10586
Community Events <= 1.5.1 - Unauthenticated SQL Injection
Medium
CVE-2025-62935
Open Close WooCommerce Store <= 5.0.1 - Missing Authorization
Medium
CVE-2025-9371
Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'
Critical
CVE-2025-11522
Search & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.