Low
CVE-2025-10306
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-9332
Interactive Medical Drawing of Human Body <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2025-62023
s2Member <= 250905 - Unauthenticated Remote Code Execution
High
CVE-2025-58966
NEX-Forms LITE < 8.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-49380
WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated PHP Object Injection
Medium
CVE-2025-5983
Meta Tag Manager <= 3.2 - Open Redirect
Medium
CVE-2025-62916
Flights & Hotels Booking WP Plugin <= 3.1 - Missing Authorization
High
CVE-2025-58961
CF7 Auto Responder Addon <= 2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-64251
Ultimate Learning Pro <= 3.9.3 - Authenticated (Instructor+) Arbitrary Content Deletion
Medium
CVE-2025-62915
SMS Contact Form 7 Notifications by ClickSend <= 1.4.0 - Missing Authorization
Medium
CVE-2025-62910
Video Gallery by Huzzaz <= 10.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-58959
Taskbot <= 6.4 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-62912
SiteGround Email Marketing <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9075
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-10735
Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2025-10744
File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure
Medium
CVE-2025-62911
Rock Convert <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49911
WooCommerce Vehicle Parts Finder <= 3.7 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-62914
Effect Maker <= 1.2.1 - Missing Authorization
Medium
CVE-2025-63070
Download Manager <= 3.3.32 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-62913
Opal Service <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-10916
FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More < 1.0.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-8877
AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
Medium
CVE-2025-11163
SmartCrawl SEO checker, analyzer & optimizer <= 3.14.3 - Missing Authorization to Plugin Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.