High
CVE-2025-6990
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2025-11499
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload
High
CVE-2025-10897
WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read
High
CVE-2025-7846
WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function
Medium
CVE-2025-8385
Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read
High
CVE-2025-64364
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-64363
Kleo < 5.5.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-12057
WavePlayer <= 3.7.0 - Unauthenticated Arbitrary File Upload
High
CVE-2025-62075
Simple Payment <= 2.4.6 - Unauthenticated Local File Inclusion
High
CVE-2025-64205
Jannah <= 7.6.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-11705
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2025-64231
Contact Form 7 PDF, Google Sheet & Database <= 3.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-68066
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-64359
Consulting < 6.7.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-9501
W3 Total Cache <= 2.8.12 - Unauthenticated Command Injection
High
CVE-2025-64360
Consulting Elementor Widgets <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-63036
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-49372
HAPPY <= 1.0.7 - Unauthenticated Remote Code Execution
High
CVE-2025-10488
Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.4.8 - Authenticated (Subscriber+) Arbitrary File Move
Medium
CVE-2025-11760
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-62988
Slider Templates <= 1.0.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-10723
PixelYourSite – Your smart PIXEL (TAG) Manager < 11.1.2 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-10686
Creta Testimonial Showcase <= 1.2.3 - Authenticated (Editor+) Local File Inclusion
High
CVE-2025-11889
AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.