Critical
CVE-2025-48332
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-49433
Supermalink <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-60073
Responsive Sidebar <= 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2025-60074
Lazy Load Optimizer <= 1.4.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-28962
Advanced Google Universal Analytics <= 1.0.3 - Missing Authorization
High
CVE-2025-24766
News Magazine X <= 1.2.37 - Unauthenticated Local File Inclusion
High
CVE-2025-60192
Premmerce Wholesale Pricing for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-54049
Custom API for WP <= 4.2.2 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-60191
Premmerce Wishlist for WooCommerce <= 1.1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-60194
Premmerce Product Search for WooCommerce <= 2.2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-54014
MediCenter - Health Medical Clinic <= 15.1 - Unauthenticated PHP Object Injection
High
CVE-2025-48164
SureDash <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-60190
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-52735
NextMove Lite <= 2.21.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-60195
Atarim <= 4.2.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-8104
Memory Usage <= 3.98 - Cross-Site Request Forgery to Limited Plugin Installation via wpmemory_install_plugin Function
Medium
CVE-2025-8113
Ebook Store <= 5.8014 - Reflected Cross-Site Scripting
Medium
CVE-2025-5529
Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-6989
Kallyas <= 4.21.0 - Authenticated (Contributor+) Arbitrary Folder Deletion
High
CVE-2025-8198
MinimogWP – The High Converting eCommerce WordPress Theme <= 3.9.0 - Unauthenticated Price Manipulation
Critical
CVE-2025-6895
MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function
Medium
CVE-2025-8103
WPeMatico RSS Feed Fetcher <= 2.8.7 - Cross-Site Request Forgery to Plugin Deactivation via handle_feedback_submission Function
High
CVE-2025-6991
Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-8097
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.