High
CVE-2025-60061
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-58940
Basil <= 1.3.12 - Unauthenticated Local File Inclusion
Medium
CVE-2025-53319
Raptive Ads <= 3.8.0 - Reflected Cross-Site Scripting
High
CVE-2025-60049
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Medium
CVE-2025-8567
Nexter Blocks <= 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
High
CVE-2025-7670
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Function
Critical
CVE-2025-8723
Cloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook
Medium
CVE-2025-8622
Flexible Maps <= 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcode
High
CVE-2025-7654
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Medium
CVE-2025-8357
Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion
Medium
CVE-2025-62889
King Addons for Elementor <= 51.1.62 - Missing Authorization
Critical
CVE-2025-6758
Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'
Medium
CVE-2025-49428
Cookie Warning <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49424
Essential Doo Components for Visual Composer <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62887
King Addons for Elementor <= 51.1.62 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7496
WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
High
CVE-2025-54707
MDTF <= 1.3.3.7 - Unauthenticated SQL Injection
Medium
CVE-2025-52753
Contact Form by Supsystic <= 1.7.36 - Reflected Cross-Site Scripting
Medium
CVE-2025-49426
Cookie Warning <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2025-8783
Contact Manager <= 8.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'title'
Critical
CVE-2025-49422
Support Ticket <= 1.9 - Unauthenticated Privilege Escalation
High
CVE-2025-8085
Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-8218
Real Spaces - WordPress Properties Directory Theme <= 3.5 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change_role_member'
Medium
CVE-2025-52752
IDonatePro <= 2.1.9 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.