Medium
CVE-2025-1054
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-39350
wProject < 5.8.0 - Missing Authorization to Unauthenticated Content Modification and Deletion
Medium
CVE-2025-46239
Theme Switcha <= 3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46244
Advanced Linked Variations for Woocommerce <= 1.0.3 - Missing Authorization
Medium
CVE-2025-46238
List Last Changes <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-64284
Majestic Support <= 1.0.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-46242
Watu Quiz <= 3.4.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-46249
Simple calendar for Elementor <= 1.6.4 - Cross-Site Request Forgery
Medium
CVE-2025-46253
GutenKit <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46226
MPL-Publisher <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39400
User Registration <= 4.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-46237
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46252
Message Filter for Contact Form 7 <= 1.6.3.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-46248
Frontend Dashboard <= 2.2.5 - Unauthenticated SQL Injection
Medium
CVE-2025-46229
Textmetrics <= 3.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-46246
CM Answers <= 3.3.3 - Cross-Site Request Forgery
Medium
CVE-2025-64196
Booster for WooCommerce <= 7.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-46254
Visual Composer Website Builder <= 45.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-46230
Popup Builder <= 1.1.35 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-39372
WordPress Events Calendar Registration & Tickets <= 2.6.0 - Reflected Cross-Site Scripting
High
CVE-2025-39366
wProject < 5.8.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-46233
Sirv <= 7.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-39380
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-46247
Appointment Booking Calendar <= 1.3.92 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.