Medium
CVE-2025-53573
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2025-58215
Ziston < 1.4.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-9500
TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter
Medium
CVE-2025-9499
Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode
Medium
CVE-2025-9618
Related Posts Lite <= 1.12 - Cross-Site Request Forgery
Medium
CVE-2025-52766
Printeers Print & Ship <= 1.17.0 - Missing Authorization
Medium
CVE-2025-60077
YayPricing <= 3.5.3 - Missing Authorization
Medium
CVE-2025-52763
Nifty Backups <= 1.08 - Reflected Cross-Site Scripting
High
CVE-2025-60078
Task Manager <= 3.0.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58711
Blog Designer PRO <= 3.4.8 - Missing Authorization
Medium
CVE-2025-52760
MultiSite Clone Duplicator <= 1.5.3 - Reflected Cross-Site Scripting
High
CVE-2025-49390
Cookie Notice & Consent <= 1.6.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-62892
Sunshine Photo Cart <= 3.5.3 - Missing Authorization
High
CVE-2025-55707
PostX <= 4.1.35 - Authenticated (Editor+) Privilege Escalation
Medium
CVE-2025-8150
Events Addon for Elementor <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter and Countdown Widgets
Medium
CVE-2025-8290
List Subpages <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Medium
CVE-2025-9374
Ultimate Tag Warrior Importer <= 0.2 - Cross-Site Request Forgery
Medium
CVE-2025-9441
iATS Online Forms <= 1.2 - Authenticated (Contributor+) SQL Injection via order Parameter
Medium
CVE-2025-8619
OSM Map Widget for Elementor <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Medium
CVE-2025-9217
Slider Revolution <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images'
Medium
CVE-2025-52759
Accordion FAQ <= 2.2.1 - Reflected Cross-Site Scripting
High
CVE-2025-9083
Ninja Forms <= 3.11.0 - Unauthenticated PHP Object Injection
High
CVE-2024-13342
Booster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File Upload
Medium
CVE-2026-28131
Elementor Addon Elements <= 1.14.4 - Authenticated (Contributor+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.