Medium
CVE-2025-8678
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-8618
WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode
High
CVE-2025-8141
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-8289
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization
High
CVE-2025-8145
Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection
High
CVE-2025-60054
OnLeash <= 1.5.2 - Unauthenticated Local File Inclusion
High
CVE-2025-53299
ThemeMakers Visual Content Composer <= 1.5.8 - Unauthenticated PHP Object Injection
High
CVE-2025-60226
White Rabbit <= 1.5.2 - Unauthenticated PHP Object Injection
Critical
CVE-2025-60220
CouponXxL <= 3.0.0 - Unauthenticated Privilege Escalation
Medium
CVE-2025-9111
AI ChatBot for WordPress <= 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-9202
ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Medium
CVE-2025-49413
Terms of Service & Privacy Policy Generator <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49412
Page Transition <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49039
Link View <= 0.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53571
HAPPY – Helpdesk Support Ticket System <= 1.0.6 - Missing Authorization
High
CVE-2025-58942
Dwell <= 1.7.0 - Unauthenticated Local File Inclusion
High
CVE-2025-54735
CubeWP Framework <= 1.1.24 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-60057
DJ Rainflow <= 1.3.13 - Unauthenticated Local File Inclusion
High
CVE-2025-60047
IPharm <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-60050
Panda <= 1.21 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49035
Admin Menu Groups <= 0.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53226
Comments Capcha Box <= 1.1 - Reflected Cross-Site Scripting
High
CVE-2025-60058
DetailX <= 1.10.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49410
TC Testimonials <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.