Medium
CVE-2025-25121
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-25151
uListing <= 2.1.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13822
Total Contest Lite <= 2.8.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-25120
Slide Banners <= 1.3 - Missing Authorization
Medium
CVE-2025-25073
Easy WP Tiles <= 1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25091
NextGen Cooliris Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22650
Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. <= 1.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-25082
FlexIDX Home Search <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25117
Smart Countdown FX <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22638
Product Table For WooCommerce <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25107
OneStore Sites <= 0.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Medium
CVE-2025-22665
RapidLoad <= 2.4.4 - Missing Authorization
Medium
CVE-2025-22658
Listings for Appfolio <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25078
Google Earth Embed <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23984
Dynamic URL SEO <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-25126
ZMSEO <= 1.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-22663
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.2.16 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-22669
Awesome Event Booking <= 2.7.5 - Cross-Site Request Forgery
Medium
CVE-2025-25116
Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-43333
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-25071
Vignette Ads <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22659
Orbit Fox by ThemeIsle <= 2.10.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22644
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25095
ReverbNation Widgets <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.