Medium
CVE-2025-39514
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-39565
MelaPress Login Security <= 2.1.0 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-39602
WooCommerce Product Table Lite <= 3.9.5 - Missing Authorization
Medium
CVE-2025-39529
Scriptless Social Sharing <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39555
Church Admin <= 5.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39581
Themify Shortcodes <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39544
WP Tools <= 5.18 - Cross-Site Request Forgery to Arbitrary File Renaming
Medium
CVE-2025-39571
WowStore <= 4.2.4 - Missing Authorization
Medium
CVE-2025-39560
Live Forms <= 4.8.4 - Missing Authorization
Medium
CVE-2025-39549
Most And Least Read Posts Widget <= 2.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39597
Fast eBay Listings <= 2.12.15 - Open Redirect
Medium
CVE-2025-39556
Mediavine Control Panel <= 2.10.6 - Unauthenticated Information Exposure
Medium
CVE-2025-39591
WP Subscription Forms <= 1.2.3 - Missing Authorization
Medium
CVE-2025-39545
WordPress REST API Authentication <= 3.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2025-39543
Royal Elementor Addons <= 1.3.977 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39600
Integration for WooCommerce and QuickBooks <= 1.3.1 - Cross-Site Request Forgery
High
CVE-2025-39538
WP-Advanced-Search <= 3.3.9.3 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2025-32658
HelpGent <= 2.2.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-23958
Editor Wysiwyg Background Color <= 1.0 - Missing Authorization
Medium
CVE-2025-39512
Bulk Term Editor <= 1.1.4 - Cross-Site Request Forgery
Medium
CVE-2025-39541
WP Simple Booking Calendar <= 2.0.13 - Missing Authorization
High
CVE-2025-39542
Xelion Webchat <= 9.1.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-39472
WooCommerce Social Login <= 2.8.2 - Cross-Site Request Forgery
Low
CVE-2025-39598
Administrator Z <= 2025.03.28 - Authenticated (Admin+) Directory Traversal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.