Medium
CVE-2025-15655
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-52749
Uji Countdown <= 2.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-48108
School Management <= 93.2.0 - Missing Authorization
Medium
CVE-2025-8091
EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-8905
Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call
Medium
CVE-2025-7662
Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2025-7778
Icons Factory <= 1.6.12 - Missing Authorization to Unauthenticated Arbitrary File Deletion via delete_files() Function
High
CVE-2025-7641
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
Medium
CVE-2025-7688
Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-7650
BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-5844
Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter
Medium
CVE-2025-8080
Alobaidi Captcha <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Medium
CVE-2025-8720
Plugin README Parser <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via target Parameter
Medium
CVE-2025-7507
elink – Embed Content <= 1.1.0 - Authenticated (Contributor+) Insufficient Input Validation
Medium
CVE-2025-8604
WP Table Builder – WordPress Table Plugin <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2025-6679
Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-8680
B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-8676
B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2025-8342
WooCommerce OTP Login With Phone Number, OTP Verification <= 1.8.47 - Authentication Bypass
High
CVE-2025-6025
Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
Medium
CVE-2025-49910
WPGuppy <= 1.1.4 - Missing Authorization
Medium
CVE-2025-55708
Quiz And Survey Master <= 10.2.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-53581
RSS Feed Pro <= 1.1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-52769
flexo-social-gallery <= 1.0006 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.