High
CVE-2025-25150
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-12597
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
Medium
CVE-2025-25153
Simple Auto Tag <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22641
FM Notification Bar <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25166
InLocation <= 1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22670
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-25081
Embed RSS <= 3.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-25154
Custom Comment Notifications <= 1.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25156
Quote Comments <= 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25152
Smart DoFollow <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-25092
All push notification for WP <= 1.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25105
Pop Up <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25124
Status Updater <= 1.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22640
Paytm Payment Donation <= 2.3.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25123
Easy Related Posts <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25101
Munk Sites <= 1.0.7 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Critical
CVE-2025-25122
WizShop <= 3.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-25162
Sports Rankings and Lists <= 1.0.2 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-25090
Dreamstime Stock Photos <= 4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-25163
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-25087
seekXL Snapr <= 2.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-25115
Like dislike plus counter | Like Dislike Buttons <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-25070
Album Reviewer <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25113
Implied Cookie Consent <= 1.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.