Medium
CVE-2025-8897
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-58204
Podlove Podcast Publisher <= 4.2.5 - Open Redirect
High
CVE-2025-54742
WpEvently <= 4.4.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-9376
Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 11.58 - Insufficient Authorization to Unauthenticated Blocklist Bypass
Medium
CVE-2025-58212
Epeken All Kurir <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58213
Booking System Trafft <= 1.0.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-58202
Simple Page Access Restriction <= 1.0.32 - Cross-Site Request Forgery
Medium
CVE-2025-58203
Solace Extra <= 1.3.2 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2025-58194
Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52757
SUMO Memberships for WooCommerce < 7.8.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-58201
AfterShip Tracking <= 1.17.17 - Missing Authorization
Medium
CVE-2025-58217
Instant Breaking News <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-58193
Uncanny Automator <= 6.7.0.1 - Missing Authorization
High
CVE-2025-54726
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection
Medium
CVE-2025-58196
UiCore Elements <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8977
Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
Medium
CVE-2025-8603
Unlimited Elements For Elementor <= 1.5.148 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-58205
ElementInvader Addons for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-49405
Houzez <= 4.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58192
WP Bulk Delete <= 1.3.6 - Missing Authorization
Medium
CVE-2025-48081
Printeers Print & Ship <= 1.17.0 - Unauthenticated Path Traversal
High
CVE-2025-54720
Nest Addons <= 1.6.3 - Unauthenticated SQL Injection
Medium
CVE-2025-49407
Houzez <= 4.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-55715
Otter - Gutenberg Block <= 3.1.0 - Unauthenticated Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.