Medium
CVE-2025-54026
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-39510
Pinterest Automatic Pin < 4.19.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-53983
JetElements For Elementor <= 2.7.7 - Authenticated (Subscriber+) Information Disclosure
Medium
CVE-2025-53987
JetMenu <= 2.4.11.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-53998
JetWooBuilder <= 2.1.20 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-53196
JetEngine <= 3.7.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-53988
JetBlocks For Elementor <= 1.3.18 - Authenticated (Subscriber+) Information Disclsoure
Medium
CVE-2025-53992
JetTricks <= 1.5.4.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-28949
Mediabay - WordPress Media Library Folders <= 1.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-47645
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-49954
WP-Click-Tracker <= 0.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-60239
CoSchool LMS <= 1.4.3 - Authenticated (Subscriber+) SQL Injection
High
e1334ab5-515c-4bce-b437-ee68a3315b78
WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - Unauthenticated SQL Injection
High
CVE-2025-28959
URL Shortener <= 3.0.7 - Unauthenticated SQL Injection
Medium
CVE-2021-4458
Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
High
CVE-2025-24759
WP-BusinessDirectory <= 3.1.4 - Unauthenticated SQL Injection
High
CVE-2025-7442
WPGYM - Wordpress Gym Management System < 67.8.0 - Unauthenticated SQL Injection
Medium
CVE-2025-49876
ProfileGrid <= 5.9.5.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-52714
Traveler < 3.2.2 - Unauthenticated SQL Injection
Medium
CVE-2025-6745
WoodMart <= 8.2.5 - Unauthenticated Post Disclosure
Medium
CVE-2025-4593
WP Register Profile With Shortcode <= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2025-6970
Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter
Medium
CVE-2025-32574
WPGYM <= 65.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-59557
Learts Addons < 1.7.5 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.