Medium
CVE-2025-54712
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Low
CVE-2025-8013
Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2025-53346
Thim Core <= 2.3.3 - Missing Authorization
Medium
CVE-2025-55713
Blocksy <= 2.1.6 - Authenticated (Shop manager+) Stored Cross-Site Scripting
High
CVE-2025-30975
Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2025-47588
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
Medium
CVE-2025-55711
WP Table Builder <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-54697
Kadence WooCommerce Email Designer <= 1.5.16 - Authenticated (Shop Manager+) Arbitrary Options Update
Medium
CVE-2025-55716
WP Statistics <= 14.15 - Missing Authorization
Medium
CVE-2025-53582
WordLift <= 3.54.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53340
Awesome Support <= 6.3.6 - Information Exposure
Medium
CVE-2025-54727
CM On Demand Search And Replace <= 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53221
CodeablePress <= 1.0.0 - Missing Authorization
High
CVE-2025-52728
Responsive Posts Carousel WordPress Plugin <= 15.0 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-52731
WordPress Event Manager, Event Calendar and Booking Plugin <= 4.0.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-49037
Authentication and xmlrpc log writer <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-3666
Sticky Side Buttons < 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49052
Netease Music <= 3.2.1 - Missing Authorization
Medium
CVE-2025-49051
Hide Text Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49053
WP Airdrop Manager <= 1.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-49054
Time Sheets <= 2.1.3 - Reflected Cross-Site Scripting
High
CVE-2025-49869
Eventin <= 4.0.31 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-24775
Forms <= 2.9.0 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-47695
Blog Designer PRO <= 3.4.7 - Authenticated (Subscriber+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.