Critical
CVE-2025-23970
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-29007
LMSACE Connect <= 3.4 - Missing Authorization
Medium
CVE-2025-24735
Chatra Live Chat + ChatBot + Cart Saver <= 1.0.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-28963
URL Shortener <= 3.0.7 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-27326
Video Gallery Block – Display your videos as a gallery in a professional way <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26591
WP fancybox <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30979
Pixelating image slideshow gallery <= 8.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-48300
Groundhogg <= 4.2.1 - Authenticated (Sales Rep+) Arbitrary File Upload
Medium
CVE-2025-28967
Contact Us page - Contact people LITE <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-23972
Contact Form 7 reCAPTCHA <= 1.2.0 - Cross-Site Request Forgery
Medium
CVE-2025-30943
Posts Slider Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30969
iFrame Images Gallery <= 9.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-28951
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-60224
Subscribe to Download <= 2.0.9 - Unauthenticated PHP Object Injection
Medium
CVE-2025-30929
fluXtore <= 1.6.0 - Missing Authorization
Medium
CVE-2025-30983
Card flip image slideshow <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30947
Cool fade popup <= 10.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-29012
CF7 7 Mailchimp Add-on < 2.4 - Missing Authorization
Medium
CVE-2025-24764
(Simply) Guest Author Name <= 4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-7022
My Reservation System <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-6740
Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter
Medium
CVE-2025-6673
Easy restaurant menu manager <= 2.0.1 - Authenticated (Contributot+) Stored Cross-Site Scripting via `nsc_eprm_menu_link` Shortcode
Medium
CVE-2024-11937
Premium Addons for Elementor <= 4.10.69 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5567
Shortcodes Ultimate <= 7.4.0 - Authenticted (Contributor+) Stored Cross-Site Scripting via 'data-url' Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.