Medium
CVE-2025-53211
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-53308
Image Slider With Description <= 9.2 - Cross-Site Request Forgery
Medium
CVE-2025-53206
HT Mega – Absolute Addons for WPBakery Page Builder <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53325
Beauty Contact Popup Form <= 6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53270
WordPress CTA <= 1.7.0 - Cross-Site Request Forgery
Medium
CVE-2025-53292
WP DataTable <= 0.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53203
WooCommerce PDF Invoice Builder <= 1.2.148 - Cross-Site Request Forgery
Medium
CVE-2025-53268
Import external attachments <= 1.5.12 - Cross-Site Request Forgery
Medium
CVE-2025-53280
Football Pool <= 2.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53332
Track Everything <= 2.0.1 - Cross-Site Request Forgery
Medium
CVE-2025-62885
VR <= 8.5.48 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53329
Społecznościowa 6 PL 2013 <= 2.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-53298
Plugin Inspector <= 1.5 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2025-53260
File Manager Plugin For Wordpress <= 7.5 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-53197
Cookiebot <= 4.5.8 - Cross-Site Request Forgery
High
CVE-2025-53281
WPB Category Slider for WooCommerce <= 1.71 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-53327
Aioseo Multibyte Descriptions <= 0.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-53320
Free Downloads EDD <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53293
Dashboard Widget Sidebar <= 1.2.3 - Missing Authorization
Medium
CVE-2025-53276
Omnipress <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-6550
The Pack Elementor addon <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5940
Osom Blocks <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
Medium
CVE-2025-6689
FL3R Accessibility Suite <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via fl3raccessibilitysuite Shortcode
Medium
CVE-2025-4587
A/B Testing for WordPress <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.