Medium
CVE-2025-28912
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-28925
WATI Chat and Notification <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-28909
WP No-Bot Question <= 0.1.7 - Cross-Site Request Forgery
Medium
CVE-2025-28876
Skrill Official <= 1.0.66 - Cross-Site Request Forgery
Medium
CVE-2024-13838
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Medium
CVE-2025-28878
Awesome Surveys <= 2.0.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-28872
Block Spam By Math Reloaded <= 2.2.4 - Missing Authorization
Medium
CVE-2025-28940
Back To Top <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2025-26923
Event post <= 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26566
In Stock Mailer for WooCommerce <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13430
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode
Medium
CVE-2025-28905
Featured Posts Grid <= 1.7 - Cross-Site Request Forgery to Cross-Site Scripting
Medium
CVE-2025-1986
Gutentor <= 3.4.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-28902
Contact Form 7 Select Box Editor Button <= 0.6 - Cross-Site Request Forgery
Medium
CVE-2025-28881
Mobile Themes <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2025-28862
Comment Date and Gravatar remover <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-28933
MaxA/B <= 2.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13413
ProductDyno <= 1.0.24 - Reflected Cross-Site Scripting via 'res' Parameter
Critical
CVE-2025-1661
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
Medium
CVE-2024-13436
Appsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-2169
WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-13228
Qubely – Advanced Gutenberg Blocks <= 1.8.13 - Authenticated (Contributor+) Sensitive Information Exposure via qubely_get_content
Medium
CVE-2025-0613
Photo Gallery by 10Web <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-1926
Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.