Medium
CVE-2025-54674
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-54705
WpEvently <= 4.4.6 - Missing Authorization
Medium
CVE-2025-8401
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
Medium
CVE-2025-54667
myCred <= 2.9.4.3 - Authenticated (Subscriber+) Race Condition
Medium
CVE-2025-47536
Content Egg <= 7.0.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2025-8151
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions
High
CVE-2025-8213
NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion
Medium
CVE-2025-52801
TheBooking <= 1.4.4 - Missing Authorization
High
CVE-2025-54052
Realtyna Organic IDX plugin <= 5.0.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54702
Ebook Store <= 5.8013 - Cross-Site Request Forgery
Medium
CVE-2025-54671
oik <= 4.15.2 - Cross-Site Request Forgery
High
CVE-2025-25174
BeeTeam368 Extensions <= 1.9.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54684
Integration for Contact Form 7 and Constant Contact <= 1.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-54676
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54706
Magical Posts Display <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54668
myCred <= 2.9.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54681
Connector for Gravity Forms and Google Sheets <= 1.2.4 - Open Redirect
Medium
CVE-2025-54699
Masteriyo - LMS <= 1.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54696
WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6348
Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter
Medium
CVE-2025-5684
MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element
High
CVE-2025-54034
Newsletters <= 4.10 - Unauthenticated Local File Inclusion
Medium
CVE-2025-60188
Atarim <= 4.2.1 - Unauthenticated Information Exposure
High
CVE-2025-60072
Anchor smooth scroll <= 1.0.2 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.