High
CVE-2025-49277
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-52815
CityGov <= 1.9 - Unauthenticated Local File Inclusion
High
CVE-2025-5927
Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion
Medium
CVE-2025-5585
SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute
High
CVE-2025-52834
Homey <= 2.4.5 - Unauthenticated SQL Injection
Critical
CVE-2025-49448
FW Food Menu <= 6.0.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-49886
Zikzag Core <= 1.4.5 - Unauthenticated Local File Inclusion
High
CVE-2025-25171
WP SmartPay <= 2.7.13 - Authenticated (Subscriber+) Account Takeover
Medium
CVE-2025-53286
Dropify <= 4.6.9 - Reflected Cross-Site Scripting
High
CVE-2025-23967
GG Bought Together for WooCommerce <= 1.0.2 - Unauthenticated SQL Injection
High
CVE-2025-53303
ThemeMove Core <= 1.4.2 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60215
Kriya <= 3.4 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-60212
VEDA <= 4.2 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-53283
Drop Uploader for CF7 - Drag&Drop File Uploader Addon <= 2.4.1 - Unauthenticated Arbitrary File Upload
High
CVE-2025-53252
Zegen <= 1.1.9 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-5258
Conference Scheduler <= 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter
High
CVE-2025-52826
Sala <= 1.1.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-52774
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-52778
xili-dictionary <= 2.12.5.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-49290
Off-Canvas Sidebars & Menus (Slidebars) <= 0.5.8.4 - Reflected Cross-Site Scripting
High
CVE-2025-30992
Puca <= 2.6.33 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32297
Simple Link Directory < 14.8.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-28993
Content No Cache <= 0.1.4 - Unauthenticated Arbitrary Function Call
Medium
CVE-2025-52799
LMS <= 9.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.