Medium
CVE-2025-49981
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-52772
Virtual Moderator <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-49970
Hello FSE Blog <= 1.0.6 - Missing Authorization
Medium
CVE-2025-50043
Code Engine <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52780
Logo Manager For Samandehi <= 0.5 - Cross-Site Request Forgery
Medium
CVE-2025-52710
File Manager Pro <= 1.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-50022
WP-FB-AutoConnect <= 4.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49968
XML Travel Portal Widget <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2025-50020
RDFa Breadcrumb <= 2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-52794
Creative Contact Form <= 1.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-52825
Real Estate Manager <= 7.3 - Cross-Site Request Forgery
Medium
CVE-2025-49966
Oganro Travel Portal Search Widget for HotelBeds APITUDE API <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-52821
Video List Manager <= 1.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-49985
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-52783
Change Cart button Colors WooCommerce <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-68561
AutomatorWP <= 5.2.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-50050
Jobs for WordPress <= 2.7.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5234
Gutenverse News <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via elementId Parameter
Medium
CVE-2025-4571
GiveWP – Donation Plugin and Fundraising Platform <= 4.3.0 - Missing Authorization To Authenticated (Contributor+) Campaign Data View And Modification
Medium
CVE-2025-5490
Football Pool <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-5524
OceanWP <= 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Select HTML Tag
Medium
CVE-2025-4367
Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode
Medium
CVE-2025-4479
ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
Medium
CVE-2025-6201
Pixel Manager for WooCommerce (PRO) <= 1.49.0 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.