Medium
CVE-2025-63075
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-7400
Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fields
High
CVE-2025-48082
Progress Planner <= 1.8.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-10645
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
High
CVE-2025-59563
Sonaar <= 4.27.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-59560
Sonaar <= 4.27.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-62931
MSN Partner Hub <= 2.8.7 - Missing Authorization
Medium
CVE-2025-62930
MapSVG <= 8.7.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-28083
Flatsome <= 3.20.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-63072
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62932
Table Block by RioVizual <= 3.0.1 - Missing Authorization
Medium
CVE-2025-62929
Testimonial Slider <= 2.0.15 - Missing Authorization
Medium
CVE-2025-62927
Nelio Content <= 4.0.5 - Missing Authorization
Medium
CVE-2025-62928
SEO Meta Description Updater <= 1.2.0 - Missing Authorization
Medium
CVE-2025-63073
The7 < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62926
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62925
Conversios.io <= 7.2.13 - Missing Authorization
Medium
CVE-2025-62918
IgnitionDeck <= 2.0.10 - Missing Authorization
Medium
CVE-2025-62922
Export Categories <= 1.0 - Missing Authorization
Medium
CVE-2025-62923
Marquee Addons for Elementor <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62919
TS Demo Importer <= 0.1.2 - Missing Authorization
High
CVE-2025-63074
The7 < 12.8.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-62921
Bulk Auto Image Title Attribute <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62920
USERCENTRICS CMP <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.