Medium
CVE-2025-25158
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Critical
CVE-2025-25109
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-24700
WP Event Aggregator <= 1.8.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-0939
MagicForm - WordPress Form Builder <= 1.6.2 - Missing Authorization
Medium
CVE-2024-12620
AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations <= 1.4.23 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-22694
Hide Shipping Method For WooCommerce <= 1.5.1 - Missing Authorization
Medium
CVE-2024-11829
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 6.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24718
WP Sessions Time Monitoring Full Automatic <= 1.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-13372
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Arbitrary Resume Download
Medium
CVE-2025-22689
Forex Calculators <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-0365
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2025-23975
Botnet Attack Blocker <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2024-12171
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22688
Unlimited Page Sidebars <= 0.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-22699
Traveler Code <= 3.1.1 - Unauthenticated Arbitrary SQL Injection
Medium
CVE-2025-24710
Gwolle Guestbook <= 4.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22685
Tags to Keywords <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-site Scripting
High
CVE-2025-22701
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-22696
Document Block – Upload & Embed Docs <= 1.1.0 - Missing Authorization
Medium
CVE-2025-22691
WP Travel <= 10.1.3 - Authenticated (Author+) SQL Injection
High
CVE-2025-22684
WP BASE Booking <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22703
Forge – Front-End Page Builder <= 1.4.6 - Cross-Site Request Forgery to Stored Cross-site Scripting
Medium
CVE-2025-22695
Nirweb support <= 3.0.3 - Missing Authorization
Medium
CVE-2024-13371
WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.