High
CVE-2025-52717
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-52722
Classiera <= 4.0.34 - Unauthenticated SQL Injection
Critical
CVE-2025-28983
Click & Pledge Connect <= 25.04010101-WP6.8 - Unauthenticated SQL Injection to Privilege Escalation
High
CVE-2025-52831
Video List Manager <= 1.7 - Unauthenticated SQL Injection
High
CVE-2025-52833
LMS <= 9.2 - Unauthenticated SQL Injection
Medium
CVE-2025-53322
Accept Authorize.NET Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
Medium
CVE-2025-53258
Hover Effects <= 2.1.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-53309
Accept Stripe Payments Using Contact Form 7 <= 3.0 - Unauthenticated Information Exposure
Medium
CVE-2025-53256
YaySMTP <= 2.6.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-53306
WP Forum Server <= 1.8.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-53211
Audio Editor & Recorder <= 2.2.3 - Unauthenticated Information Exposure
Medium
CVE-2025-53332
Track Everything <= 2.0.1 - Cross-Site Request Forgery
Medium
CVE-2025-39487
Rankie <= 1.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-6258
WP SoundSystem <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpsstm-track Shortcode
High
CVE-2025-5590
Owl carousel responsive <= 1.9 - Authenticated (Contributor+) SQL Injection via id Parameter
High
CVE-2025-52834
Homey <= 2.4.5 - Unauthenticated SQL Injection
High
CVE-2025-23967
GG Bought Together for WooCommerce <= 1.0.2 - Unauthenticated SQL Injection
Medium
CVE-2025-32297
Simple Link Directory < 14.8.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-39474
Amely <= 3.1.4 - Unauthenticated SQL Injection
High
CVE-2025-52829
DirectIQ Email Marketing <= 2.0 - Unauthenticated SQL Injection
Medium
CVE-2025-2942
Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure
Medium
CVE-2025-52822
WP Roadmap <= 2.1.3 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-52821
Video List Manager <= 1.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68561
AutomatorWP <= 5.2.4 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.