Medium
CVE-2025-54046
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2025-54689
Urna <= 2.5.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-52742
Pets <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-52741
Post Connector <= 1.0.11 - Reflected Cross-Site Scripting
High
CVE-2025-54690
Xinterio <= 4.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54025
Coupon Affiliates <= 6.4.1 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-53561
Prevent files / folders access <= 2.6.0 - Authenticated (Subscriber+) Path Traversal
Medium
CVE-2025-7727
Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
Medium
CVE-2025-7399
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-8595
Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
High
CVE-2025-8420
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
High
CVE-2025-7036
CleverReach WP <= 1.5.20 - Unauthenticated SQL Injection via title Parameter
Medium
CVE-2025-6690
WP Tournament Registration <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via field Parameter
Medium
CVE-2025-6259
esri-map-view <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via esri-map-view Shortcode
Medium
CVE-2025-6256
Flex Guten <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
Medium
CVE-2025-7502
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6986
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
Critical
CVE-2025-6994
Reveal Listing <= 3.3 - Unauthenticated Privilege Escalation
Medium
CVE-2025-49923
Seriously Simple Podcasting <= 3.11.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-8620
GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure
High
CVE-2025-49921
JetReviews <= 3.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-52740
Boldermail <= 2.4.0 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-7498
Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
Medium
CVE-2025-8100
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.