High
CVE-2025-6423
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Medium
CVE-2025-7518
RSFirewall! <= 1.1.42 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2025-6057
WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-29009
Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-60235
Helpdesk Support Ticket System for WooCommerce <= 2.1.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-31070
HTML5 Radio Player - WPBakery Page Builder Addon <= 2.5 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-6058
WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
High
CVE-2025-6851
Broken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2025-5392
GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution
Critical
CVE-2025-7401
Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php
High
CVE-2025-59555
Medizin < 1.9.7 - Unauthenticated Local File Inclusion
High
CVE-2025-49430
Ultimate Video Player WordPress & WooCommerce Plugin <= 10.1 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-6691
SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion
Critical
CVE-2025-4828
Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-59558
Billey < 2.1.6 - Unauthenticated Local File Inclusion
High
CVE-2025-6746
WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-7327
Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
High
CVE-2025-47571
Super Store Finder < 6.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-28955
Easy Video Player Wordpress & WooCommerce <= 10.0 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-60227
WP Pipes <= 1.4.3 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-28963
URL Shortener <= 3.0.7 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-48300
Groundhogg <= 4.2.1 - Authenticated (Sales Rep+) Arbitrary File Upload
High
CVE-2025-28951
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-6586
Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.