High
CVE-2025-49055
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-22715
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-69351
Ninja Tables <= 5.2.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-23805
Media Search Enhanced <= 0.9.1 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-69346
AffiliateX <= 1.3.9.3 - Missing Authorization
Medium
CVE-2026-22470
FireStorm Professional Real Estate <= 2.7.11 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-67931
BulletProof Security <= 6.9 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-9318
Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
Medium
CVE-2025-13215
Shortcodes and extra features for Phlox theme <= 2.17.13 - Unauthenticated Draft Posts Information Exposure
Medium
CVE-2025-13652
CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter
Medium
CVE-2025-14153
Page Expire Popup/Redirection for WordPress <= 1.0 - Authenticated (Author+) SQL Injection via 'id' Shortcode Attribute
Medium
CVE-2025-13409
Form Vibes – Database Manager for Forms <= 1.4.13 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-63019
Cookies and Content Security Policy <= 2.34 - Unauthenticated Information Exposure
Medium
CVE-2025-67921
Lobo < 2.8.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-67928
Automotive Listings <= 18.6 - Unauthenticated SQL Injection
Medium
CVE-2026-24356
GetGenie <= 4.3.0 - Missing Authorization
Medium
CVE-2025-59136
Gerencianet Oficial <= 3.1.3 - Unauthenticated Information Exposure
High
CVE-2025-62126
Varnish/Nginx Proxy Caching <= 1.8.3 - Unauthenticated Information Exposure
High
CVE-2025-68865
Infility Global <= 2.15.36 - Unauthenticated SQL Injection
Medium
CVE-2025-62118
AdWords Conversion Tracking Code <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-62143
Post Video Players <= 1.163 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-62083
BoomDevs WordPress Coming Soon <= 1.0.4 - Unauthenticated Information Exposure
High
CVE-2025-62114
Download Media Library <= 0.2.1 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-49340
Direct Payments WP <= 1.3.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.