Medium
CVE-2025-50018
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-50030
Spark Multipurpose <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49972
TM Replace Howdy <= 1.4.2 - Cross-Site Request Forgery
Medium
CVE-2025-49974
UpStream: a Project Management Plugin for WordPress <= 2.1.0 - Missing Authorization
Medium
CVE-2025-50017
WP Voting Contest <= 5.8 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-52782
Scroll UP <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-49971
eDS Responsive Menu <= 1.2 - Missing Authorization
Medium
CVE-2025-50046
WPComplete <= 2.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-52715
Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-49987
CRM ERP Business Solution <= 1.13 - Missing Authorization
Medium
CVE-2025-49967
Live Sports Streamthunder <= 2.1 - Cross-Site Request Forgery
Critical
CVE-2025-49926
Kalium <= 3.25 - Unauthenticated Arbitrary Code Execution
Medium
CVE-2024-50555
Elementor Website Builder <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52792
WP User Stylesheet Switcher <= v2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-50034
Enhanced Blocks – Page Builder Blocks for Gutenberg <= 1.4.1 - Missing Authorization
Medium
CVE-2025-49984
PowerPress Podcasting <= 11.13.11 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-50041
Gutenberg Blocks – ACF Blocks Suite <= 2.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49973
Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes <= 1.0.10 - Missing Authorization
Medium
CVE-2025-50024
ATP Call Now <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-50025
CP Polls <= 1.0.81 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-50035
Fyrebox Quizzes <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52795
WP Front User Submit / Front Editor <= 4.9.4 - Cross-Site Request Forgery
Medium
CVE-2025-49996
WP Visitor Statistics (Real Time Traffic) <= 8.4 - Missing Authorization
High
CVE-2025-4102
Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.