Medium
CVE-2025-7809
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-52736
Finale Lite <= 2.20.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-54021
Simple File List <= 6.1.14 - Unauthenticated Arbitrary File Download
High
CVE-2025-60189
PoloPag – Pix Automático para Woocommerce <= 2.0.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-7810
StreamWeasels Kick Integration <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-48332
Gutenberg Blocks <= 3.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49433
Supermalink <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-60073
Responsive Sidebar <= 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2025-60074
Lazy Load Optimizer <= 1.4.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-28962
Advanced Google Universal Analytics <= 1.0.3 - Missing Authorization
High
CVE-2025-24766
News Magazine X <= 1.2.37 - Unauthenticated Local File Inclusion
High
CVE-2025-60192
Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-54049
Custom API for WP <= 4.2.2 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-60191
Premmerce Wishlist for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-60194
Premmerce Product Search for WooCommerce <= 2.2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-54014
MediCenter - Health Medical Clinic <= 15.1 - Unauthenticated PHP Object Injection
High
CVE-2025-48164
SureDash <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-60190
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-52735
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-60195
Atarim <= 4.2.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-8104
Memory Usage <= 3.98 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function
Medium
CVE-2025-8113
Ebook Store <= 5.8014 - Reflected Cross-Site Scripting
Medium
CVE-2025-5529
Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-6989
Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.