High
CVE-2025-53210
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-52743
oik-privacy-policy <= 1.4.10 - Reflected Cross-Site Scripting
Medium
CVE-2025-31425
WP Lead Capturing Pages < 2.6 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2025-49061
Porn Videos Embed <= 0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-54007
Post Grid and Gutenberg Blocks <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-54046
Cost Calculator <= 7.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-54689
Urna <= 2.5.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-52742
Pets <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-52741
Post Connector <= 1.0.11 - Reflected Cross-Site Scripting
High
CVE-2025-54690
Xinterio <= 4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54025
Coupon Affiliates <= 6.4.1 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-53561
Prevent files / folders access <= 2.6.0 - Authenticated (Subscriber+) Path Traversal
Medium
CVE-2025-7727
Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
Medium
CVE-2025-7399
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8595
Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
High
CVE-2025-8420
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
High
CVE-2025-7036
CleverReach WP <= 1.5.20 - Unauthenticated SQL Injection via title Parameter
Medium
CVE-2025-6690
WP Tournament Registration <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via field Parameter
Medium
CVE-2025-6259
esri-map-view <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via esri-map-view Shortcode
Medium
CVE-2025-6256
Flex Guten <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
Medium
CVE-2025-7502
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6986
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
Critical
CVE-2025-6994
Reveal Listing <= 3.3 - Unauthenticated Privilege Escalation
Medium
CVE-2025-49923
Seriously Simple Podcasting <= 3.11.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.