Medium
CVE-2025-8388
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
High
CVE-2025-7366
Rehub <= 19.9.7 - Unauthenticated Arbitrary Shortcode Execution via re_filterpost
Medium
CVE-2025-58785
Ray Enterprise Translation <= 1.7.1 - Missing Authorization
Medium
CVE-2025-9260
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read
High
CVE-2025-60076
Ray Enterprise Translation <= 1.7.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48317
WooCommerce Payment Gateway for Saferpay <= 0.4.9 - Unauthenticated Path Traversal
Medium
CVE-2025-7501
Wonder Slider Lite & Wonder Slider <= 14.4 - Authenticated (Contributor+) Dom-based Stored Cross-Site Scripting
Medium
CVE-2025-52800
The E-Commerce ERP <= 2.1.1.3 - Missing Authorization
Critical
CVE-2025-52836
The E-Commerce ERP <= 2.1.1.3 - Unauthenticated Privilege Escalation
High
CVE-2025-28998
SERPed.net <= 4.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49987
CRM ERP Business Solution <= 1.13 - Missing Authorization
Medium
CVE-2025-49984
PowerPress Podcasting <= 11.13.11 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-3515
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks
Medium
CVE-2025-4187
UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read
Critical
CVE-2025-4631
Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint
Medium
CVE-2025-5016
Relevanssi <= 4.24.5 (Free) and <= 2.27.6 (Premium) - Unauthenticated Stored Cross-Site Scripting via Excerpt Highlights
High
CVE-2025-31914
Pixel WordPress Form BuilderPlugin & Autoresponder <= 1.0.2 - Unauthenticated SQL Injection
Medium
CVE-2025-31915
Pixel WordPress Form BuilderPlugin & Autoresponder <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2025-3860
CarDealerPress <= 6.8.2505.00 - Authenticated (Contributor+) Stored Cross-Site Scripting via saleclass Parameter
High
CVE-2025-46264
PowerPress Podcasting plugin by Blubrry <= 11.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11299
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2025-39407
Memberpress < 1.12.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-32605
MemberPress Discord Addon <= 1.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2025-31030
Ray Enterprise Translation <= 1.7.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.