High
CVE-2025-24759
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-49952
Houzez <= 4.1.1 - Authenticated (Subscriber+) Insecure Direct Object Reference
Critical
CVE-2025-6058
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-48291
Contest Gallery <= 26.0.6 - Reflected Cross-Site Scripting
High
CVE-2025-6851
Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-6838
Broken Link Notifier <= 1.3.0 - Authenticated (Contributor+) CSV Injection
High
CVE-2025-7442
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
Medium
CVE-2025-5530
WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6716
Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting
Critical
CVE-2025-5392
GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution
High
CVE-2025-49950
Official Integration for Billingo <= 4.2.5 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2025-49876
ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) SQL Injection
Critical
CVE-2025-7401
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php
Medium
CVE-2025-49319
Wishlist for WooCommerce <= 3.2.3 - Missing Authorization
High
CVE-2025-59555
Medizin < 1.9.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6068
FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel <= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
High
CVE-2025-52714
Traveler < 3.2.2 - Unauthenticated SQL Injection
Medium
CVE-2025-28973
Pro Bulk Watermark Plugin for WordPress <= 2.0 - Authenticated (Subscriber+) Path Traversal
Medium
CVE-2025-6745
WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
Medium
CVE-2025-4593
WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2025-49430
Ultimate Video Player WordPress & WooCommerce Plugin <= 10.1 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-5807
Gwolle Guestbook <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting via `gwolle_gb_content` Parameter
Medium
CVE-2025-4406
wpForo Forum <= 2.4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Avatar
Medium
CVE-2025-6976
Events Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin Shortcodes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.