Critical
CVE-2025-5746
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,822
Reset filters
High
CVE-2025-49417
WooCommerce Product Multi-Action <= 1.3 - Unauthenticated PHP Object Injection
High
CVE-2025-49070
Elessi < 6.4.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-52729
Diza <= 1.3.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-53271
Additional Order Filters for WooCommerce <= 1.22 - Cross-Site Request Forgery
Medium
CVE-2025-53255
HurryTimer <= 2.13.1 - Missing Authorization
Medium
CVE-2025-53203
WooCommerce PDF Invoice Builder <= 1.2.148 - Cross-Site Request Forgery
High
CVE-2025-53281
WPB Category Slider for WooCommerce <= 1.71 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-39362
Mollie Payments for WooCommerce <= 8.0.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-5813
Amazon Products to WooCommerce <= 1.2.7 - Missing Authorization to Unauthenticated Arbitrary Product Creation
High
CVE-2023-25998
Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Unauthenticated Local File Inclusion
High
CVE-2025-28946
PrintXtore < 1.7.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62884
Coupon Affiliates <= 7.2.0 - Missing Authorization
Critical
CVE-2025-49883
Greenmart <= 4.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-28990
SNS Vicky <= 3.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49873
Elessi <= 6.3.9 - Reflected Cross-Site Scripting
High
CVE-2025-23967
GG Bought Together for WooCommerce <= 1.0.2 - Unauthenticated SQL Injection
High
CVE-2025-30992
Puca <= 2.6.33 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49321
Eventin <= 4.0.28 - Reflected Cross-Site Scripting
High
CVE-2025-39474
Amely <= 3.1.4 - Unauthenticated SQL Injection
Medium
CVE-2025-24774
WPCRM - CRM for Contact form CF7 & WooCommerce <= 3.2.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-24769
Zenny <= 1.7.5 - Unauthenticated Local File Inclusion
Critical
CVE-2025-28947
MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-52814
BRW <= 1.8.7 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.