High
CVE-2025-6253
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-5391
WooCommerce Purchase Orders <= 1.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-8418
B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation
High
CVE-2025-49036
Premium Addons for KingComposer <= 1.1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49271
GravityWP - Merge Tags <= 1.4.4 - Unauthenticated Local File Inclusion
High
CVE-2025-48302
FundEngine <= 1.7.4 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-54028
CF7 WOW Styler <= 1.7.2 - Unauthenticated Local File Inclusion
High
CVE-2025-48169
Code Engine <= 0.3.3 - Authenticated (Contributor+) Remote Code Execution
Critical
CVE-2025-54693
Form Block <= 1.5.5 - Unauthenticated Arbitrary File Upload
High
CVE-2025-53210
ZoloBlocks <= 2.3.2 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-54689
Urna <= 2.5.7 - Unauthenticated Local File Inclusion
High
CVE-2025-54690
Xinterio <= 4.2 - Unauthenticated Local File Inclusion
High
CVE-2025-8420
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
High
CVE-2025-49921
JetReviews <= 3.0.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-5061
WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-6207
WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-60063
Rosalinda <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-31048
Shopo <= 1.1.4 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-60064
Renewal <= 1.2.2 - Unauthenticated Local File Inclusion
High
CVE-2025-60065
Pinevale <= 1.0.14 - Unauthenticated Local File Inclusion
High
CVE-2025-60067
Giardino <= 1.1.10 - Unauthenticated Local File Inclusion
High
CVE-2025-60066
Katelyn <= 1.0.10 - Unauthenticated Local File Inclusion
Critical
CVE-2025-60068
Javo Core <= 3.0.0.266 - Unauthenticated Remote Code Execution
Critical
CVE-2025-54019
Alone < 7.8.5 - Unauthenticated Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.