Medium
8bd77afe-585d-445e-adfd-48c5e0c4dca9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-48350
AutoWP <= 2.2.2 - Missing Authorization
High
CVE-2025-53244
Magazine Elite <= 1.2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58938
IDonatePro <= 2.1.9 - Missing Authorization
High
CVE-2025-53248
Magazine <= 1.2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58939
Super Store Finder <= 7.5 - Cross-Site Request Forgery
Medium
CVE-2025-48347
bxSlider integration for WordPress <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-53216
Glamer <= 1.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-58998
s2Member <= 250701 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48354
Better Post & Filter Widgets for Elementor <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48355
ProveSource Social Proof <= 3.1.2 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-48353
Clickbank WordPress Plugin (Niche Storefront) <= 1.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-8945
Edit Password Protected <= 1.3.4 - Unauthenticated Protection Bypass
Medium
CVE-2025-48348
Site Offline <= 1.5.7 - Missing Authorization
Medium
CVE-2025-60086
Voting Contest <= 5.8 - Missing Authorization
Medium
CVE-2025-48351
Kento Splash Screen <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-53247
BlogMarks < 1.1.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-53225
e-Boekhouden.nl <= 1.9.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-8064
Bible SuperSearch <= 6.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via selector_height Parameter
Critical
CVE-2025-8895
WP Webhooks <= 3.3.5 - Unauthenticated Arbitrary File Copy
Medium
CVE-2025-8607
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-8592
Inspiro <= 2.1.2 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Medium
CVE-2025-7221
GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Missing Authorization to Donation Update
Medium
CVE-2025-49396
Themify Builder <= 7.6.7 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.