Medium
CVE-2025-49932
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-49927
JetWooBuilder <= 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-54019
Alone < 7.8.5 - Unauthenticated Remote Code Execution
High
CVE-2025-59564
EduMall < 4.4.5 - Unauthenticated Local File Inclusion
High
CVE-2025-60071
Riode | Multi-Purpose WooCommerce <= 1.6.23 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58970
Doctreat <= 1.6.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-54055
Druco <= 1.5.2 - Reflected Cross-Site Scripting
High
CVE-2025-53586
WeMusic <= 1.9.1 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-60070
Molla <= 1.5.13 - Unauthenticated Remote Code Execution
High
CVE-2025-64223
PenNews < 6.7.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48296
UpStore <= 1.7.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-53585
WeMusic <= 1.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-54718
Yogi - Health Beauty & Yoga <= 2.9.2 - Reflected Cross-Site Scripting
High
CVE-2025-54719
Yogi - Health Beauty & Yoga <= 2.9.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60069
MinimogWP <= 3.9.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58971
Doctreat <= 1.6.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-7500
Ocean Social Sharing <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-7710
Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator
Medium
CVE-2025-8488
Ultimate Addons for Elementor (Formerly Elementor Header & Footer Builder) <= 2.4.6 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Medium
CVE-2025-8399
Mmm Unity Loader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parameter
Medium
CVE-2025-8391
Magic Edge – Lite <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via height Parameter
Medium
CVE-2025-8400
Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-6832
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-8212
Medical Addon for Elementor <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typewriter Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.