Medium
CVE-2025-54054
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-53219
WP-Database-Optimizer-Tools <= 0.2 - Cross-Site Request Forgery
High
CVE-2025-58206
MaxCoach <= 3.2.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-8451
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Medium
CVE-2025-54730
Embedder for Google Reviews <= 1.7.3 - Missing Authorization
Medium
CVE-2025-54712
Easy Elementor Addons <= 2.2.7 - Missing Authorization
Low
CVE-2025-8013
Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2025-53346
Thim Core <= 2.3.3 - Missing Authorization
Medium
CVE-2025-55713
Blocksy <= 2.1.6 - Authenticated (Shop manager+) Stored Cross-Site Scripting
High
CVE-2025-30975
Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2025-47588
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
Medium
CVE-2025-55711
WP Table Builder <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-54697
Kadence WooCommerce Email Designer <= 1.5.16 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2025-55716
WP Statistics <= 14.15 - Missing Authorization
Medium
CVE-2025-53582
WordLift <= 3.54.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53340
Awesome Support <= 6.3.6 - Information Exposure
Medium
CVE-2025-54727
CM On Demand Search And Replace <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53221
CodeablePress <= 1.0.0 - Missing Authorization
High
CVE-2025-52728
Responsive Posts Carousel WordPress Plugin <= 15.0 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-52731
WordPress Event Manager, Event Calendar and Booking Plugin <= 4.0.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-49037
Authentication and xmlrpc log writer <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-3666
Sticky Side Buttons < 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49052
Netease Music <= 3.2.1 - Missing Authorization
Medium
CVE-2025-49051
Hide Text Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.