High
CVE-2025-60087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2025-8905
Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call
Critical
CVE-2025-7778
Icons Factory <= 1.6.12 - Missing Authorization to Unauthenticated Arbitrary File Deletion via delete_files() Function
High
CVE-2025-7641
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
High
CVE-2025-7650
BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-6679
Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-8680
B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-6025
Order Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts
Medium
CVE-2025-53241
Simplified <= 1.0.11 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2025-54701
Unicamp <= 2.6.3 - Unauthenticated Local File Inclusion
High
CVE-2025-54677
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2025-52806
JobSearch < 3.0.8 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-54700
Makeaholic <= 1.8.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-47650
Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-54715
Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download
High
CVE-2025-58206
MaxCoach <= 3.2.5 - Unauthenticated Local File Inclusion
Low
CVE-2025-8013
Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2025-30975
Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2025-47588
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
High
CVE-2025-52728
Responsive Posts Carousel WordPress Plugin <= 15.0 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-24775
Forms <= 2.9.0 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-47695
Blog Designer PRO <= 3.4.7 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-31100
School Management <= 1.93.1 (02-07-2025) - Authenticated (Student+) Arbitrary File Upload
Medium
CVE-2025-8081
Elementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.