Medium
CVE-2026-28132
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-58218
Small Package Quotes – USPS Edition <= 1.3.9 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-54722
WooTour <= 3.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-9344
UsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9352
Pronamic Google Maps <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0951
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Medium
CVE-2025-7732
Lazy Load for Videos <= 2.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via data-video-title and href Attributes
Medium
CVE-2025-8490
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
Medium
CVE-2025-9277
SiteSEO – SEO Simplified <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Broken Regex Expression
High
CVE-2025-54029
WooCommerce csv import export <= 2.0.6 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-54714
Zephyr Project Manager <= 3.3.201 - Missing Authorization
Medium
CVE-2025-54710
Tiktok Feed <= 1.0.21 - Missing Authorization
High
CVE-2025-49403
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-49387
Drag and Drop File Upload for Elementor Forms <= 1.5.3 - Unauthenticated Arbitrary File Upload
High
bd331eb2-9ec2-4105-ae79-01c9c772de35
Cars4Rent <= 1.4.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-53220
XmasB Quotes <= 1.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-54734
B Slider <= 1.1.30 - Missing Authorization
High
CVE-2025-58951
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
Medium
CVE-2025-54711
Info Cards <= 1.0.11 - Missing Authorization
Medium
CVE-2025-53289
Theme Blvd Widget Areas <= 1.3.0 - Reflected Cross-Site Scripting
High
CVE-2025-48090
Blanka - One Page WordPress < 1.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49394
Image Gallery block – Create and display photo gallery/photo album. <= 1.0.7 - Missing Authorization
Medium
CVE-2025-54733
All Bootstrap Blocks <= 1.3.28 - Missing Authorization
Medium
CVE-2025-53579
Captcha.eu <= 1.0.60 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.