High
CVE-2025-53207
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2025-52726
CouponXxL Custom Post Types <= 3.0 - Unauthenticated Privilege Escalation
Critical
CVE-2025-28983
Click & Pledge Connect <= 25.04010101-WP6.8 - Unauthenticated SQL Injection to Privilege Escalation
High
CVE-2025-52723
Networker <= 1.2.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-52725
CouponXxL <= 3.0.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-53209
Masteriyo LMS PRO <= 2.20.0 - Unauthenticated Privilege Escalation
High
CVE-2025-52807
Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Unauthenticated Local File Inclusion
High
CVE-2025-49070
Elessi < 6.4.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-4414
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-28956
Backwp <= 2.0.2 - Reflected Cross-Site Scripting
Critical
CVE-2025-52718
Alone <= 7.8.2 - Unauthenticated Remote Code Execution
Medium
CVE-2025-49032
Gutenberg Blocks <= 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-47627
PrivateContent - Mail Actions <= 2.3.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-5692
Lead Form Data Collection to CRM <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Many Actions
High
CVE-2025-52724
Amwerk <= 1.2.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-49866
Beautiful Cookie Consent Banner <= 4.6.1 - Reflected Cross-Site Scripting
High
CVE-2025-52831
Video List Manager <= 1.7 - Unauthenticated SQL Injection
High
CVE-2025-49029
Custom Login And Signup Widget <= 1.0 - Authenticated (Administrator+) Remote Code Execution
High
CVE-2025-52729
Diza <= 1.3.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-5314
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
Medium
CVE-2025-6756
Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Critical
CVE-2025-6934
Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'
High
CVE-2025-28980
Aviation Weather from NOAA <= 0.7.2 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-49414
FW Gallery <= 8.0.0 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.