High
CVE-2025-6025
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-49910
WPGuppy <= 1.1.4 - Missing Authorization
Medium
CVE-2025-55708
Quiz And Survey Master <= 10.2.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-53581
RSS Feed Pro <= 1.1.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-52769
flexo-social-gallery <= 1.0006 - Cross-Site Request Forgery
Medium
CVE-2025-52765
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2025-54739
Nexter Blocks <= 4.5.4 - Missing Authorization
Medium
CVE-2025-54717
WP Membership <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-55714
JetElements For Elementor <= 2.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-55710
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.37.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-53249
Build App Online <= 1.0.23 - Cross-Site Request Forgery
Medium
CVE-2025-53341
Stratus <= 4.2.5 - Missing Authorization
Medium
CVE-2025-53344
Thim Core <= 2.3.3 - Cross-Site Request Forgery
Medium
CVE-2025-52771
Video Expander <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54736
Savoy <= 3.0.8 - Unauthenticated Information Exposure
Medium
CVE-2025-53587
Findgo <= 1.3.57 - Cross-Site Request Forgery
Medium
CVE-2025-49044
Simple Poll <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-8867
Graphina - Elementor Charts and Graphs <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54708
B Blocks <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49048
Inspectlet - User Session Recording and Heatmaps <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53330
WP Rentals <= 3.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53241
Simplified <= 1.0.11 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2025-53575
Primer MyData for Woocommerce <= 4.2.5 - Cross-Site Request Forgery
Medium
CVE-2025-54032
Real Estate Manager Pro <= 12.7.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.