Critical
CVE-2025-47696
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2025-47453
WP Smart Import <= 1.1.3 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48289
Kids Planet <= 2.2.14 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39490
Backpack Traveler <= 2.10.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-31913
Ogami <= 1.53 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32289
Yozi <= 2.0.63 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48123
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Critical
CVE-2025-39506
Nasa Core <= 6.3.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-31423
Umberto <= 1.2.8 - Unauthenticated PHP Object Injection
Critical
CVE-2025-32302
Winnex <= 1.3.2 - Unauthenticated Local File Inclusion
High
CVE-2025-31053
KBx Pro Ultimate < 8.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-47670
WordPress Social Login and Register <= 7.6.10 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48126
Essential Real Estate <= 5.2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-4611
Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode
Medium
CVE-2025-4219
DPEPress <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3781
Raisely Donation Form <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via raisely_donation_form Shortcode
Medium
CVE-2025-4217
WP YouTube Video Optimizer <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-4105
Splitit <= 4.2.8 - Missing Authorization to Multiple Administrative Actions
Medium
CVE-2025-4221
Animated Buttons <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12561
Affiliate Sales in Google Analytics and other tools <= 2.0.0 - Open Redirect
Medium
CVE-2025-3750
Network Posts Extended <= 7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_height Parameter
High
CVE-2025-4803
Glossary by WPPedia <= 1.3.0 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-47575
School Management <= 92.0.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-39505
Goodlayers Hotel <= 3.1.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.