High
CVE-2025-54701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-53343
Modernize <= 3.4.0 - Missing Authorization
High
CVE-2025-54677
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2025-54728
CM On Demand Search And Replace <= 1.5.2 - Cross-Site Request Forgery
Medium
CVE-2025-55712
The Plus Addons for Elementor Page Builder Lite <= 6.3.13 - Missing Authorization
High
CVE-2025-52806
JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-54746
Shortcode Redirect <= 1.0.02 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54729
Webba Booking <= 6.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-54749
JetProductGallery <= 2.2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53342
Modernize <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-54700
Makeaholic <= 1.8.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-55709
Visual Composer Website Builder <= 45.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54670
oik <= 4.15.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-54740
Print My Blog <= 3.27.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52767
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2025-28977
WP Pipes <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-54732
WPDM – Premium Packages <= 6.0.2 - Cross-Site Request Forgery
Medium
CVE-2025-47650
Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-54715
Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2025-54054
12 Step Meeting List <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53219
WP-Database-Optimizer-Tools <= 0.2 - Cross-Site Request Forgery
High
CVE-2025-58206
MaxCoach <= 3.2.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-8451
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Medium
CVE-2025-54730
Embedder for Google Reviews <= 1.7.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.