High
CVE-2025-48338
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-58630
Simple Matomo Tracking Code <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-58604
Mail Mint <= 1.18.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-58628
Miraculous < 2.0.9 - Unauthenticated SQL Injection
Medium
CVE-2025-9441
iATS Online Forms <= 1.2 - Authenticated (Contributor+) SQL Injection via order Parameter
Medium
CVE-2026-28131
Elementor Addon Elements <= 1.14.4 - Authenticated (Contributor+) Information Exposure
High
CVE-2024-13807
Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files
Medium
CVE-2025-58201
AfterShip Tracking <= 1.17.17 - Missing Authorization
High
CVE-2025-54726
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection
Medium
CVE-2025-8977
Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality
High
CVE-2025-54720
Nest Addons <= 1.6.3 - Unauthenticated SQL Injection
Medium
CVE-2025-55715
Otter - Gutenberg Block <= 3.1.0 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-58951
Advance Seat Reservation Management for WooCommerce <= 3.1 - Unauthenticated SQL Injection
High
CVE-2025-9172
Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter
Medium
CVE-2025-5998
PPWP – Password Protect Pages <= 1.9.10 - Authenticated (Subscriber+) Content Exposure via REST API
Medium
CVE-2025-48305
Goal Tracker for Patreon <= 0.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-57888
Jobmonster <= 4.8.0 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-48355
ProveSource Social Proof <= 3.1.2 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-49404
Listeo-Core < 2.0.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-49408
Templately <= 3.2.7 - Authenticated (Author+) Information Disclosure
High
CVE-2025-7670
JS Archive List <= 6.1.5 - Unauthenticated SQL Injection via build_sql_where Function
High
CVE-2025-7654
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
High
CVE-2025-54707
MDTF <= 1.3.3.7 - Unauthenticated SQL Injection
Medium
CVE-2025-52752
IDonatePro <= 2.1.9 - Authenticated (Subscriber+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.