Medium
CVE-2025-39393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-46235
SKT Blocks <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46251
VikRestaurants Table Reservations and Take-Away <= 1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-64234
Evergreen Content Poster <= 1.4.5 - Missing Authorization
Medium
CVE-2025-46240
Simple Download Counter <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46243
Recover abandoned cart for WooCommerce <= 2.2 - Cross-Site Request Forgery
Medium
CVE-2026-28138
uListing <= 2.2.0 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-46236
HTML Forms <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1054
UiCore Elements – Free Elementor widgets and templates <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Medium
CVE-2025-39350
wProject < 5.8.0 - Missing Authorization to Unauthenticated Content Modification and Deletion
Medium
CVE-2025-46239
Theme Switcha <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46244
Advanced Linked Variations for Woocommerce <= 1.0.3 - Missing Authorization
Medium
CVE-2025-46238
List Last Changes <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-64284
Majestic Support <= 1.0.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-46242
Watu Quiz <= 3.4.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-46249
Simple calendar for Elementor <= 1.6.4 - Cross-Site Request Forgery
Medium
CVE-2025-46253
GutenKit <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46226
MPL-Publisher <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39400
User Registration <= 4.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-46237
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46252
Message Filter for Contact Form 7 <= 1.6.3.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-46248
Frontend Dashboard <= 2.2.5 - Unauthenticated SQL Injection
Medium
CVE-2025-46229
Textmetrics <= 3.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-46246
CM Answers <= 3.3.3 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.