Medium
CVE-2025-52779
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
High
CVE-2025-30949
Site Chat on Telegram <= 1.0.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-39561
LoginWP - Pro <= 4.0.8.5 - Missing Authorization
Medium
CVE-2025-30955
ListingEasy <= 1.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-29000
Multi-language Responsive Contact Form <= 2.8 - Missing Authorization
High
CVE-2025-47571
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49031
SMu Manual DoFollow <= 1.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-46500
Wordpress Auto Spinner <= 3.25.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-47652
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-52787
Tennis Court Bookings <= 1.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-47554
CSS3 Compare Pricing Tables for WordPress <= 11.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-28955
Easy Video Player Wordpress & WooCommerce <= 10.0 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-60227
WP Pipes <= 1.4.3 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-60238
UNIVERSAM < 9.08 - Unauthenticated PHP Object Injection
Medium
CVE-2025-28971
Easy Elements Hider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-27358
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection
Medium
CVE-2025-28957
OwnerRez <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-29001
WooCommerce Shop Page Builder <= 2.27.7 - Missing Authorization
Medium
CVE-2025-28969
Gallery Widget <= 1.2.1 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2025-23970
Service Finder Booking <= 6.0 - Unauthenticated Privilege Escalation
Medium
CVE-2025-29007
LMSACE Connect <= 3.4 - Missing Authorization
Medium
CVE-2025-24735
Chatra Live Chat + ChatBot + Cart Saver <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-28963
URL Shortener <= 3.0.7 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-27326
Video Gallery Block – Display your videos as a gallery in a professional way <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.