Medium
CVE-2025-54729
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-54749
JetProductGallery <= 2.2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53342
Modernize <= 3.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-54700
Makeaholic <= 1.8.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-55709
Visual Composer Website Builder <= 45.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-54670
oik <= 4.15.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-54740
Print My Blog <= 3.27.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-52767
NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross-Site Request Forgery
Medium
CVE-2025-28977
WP Pipes <= 1.4.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-54732
WPDM – Premium Packages <= 6.0.2 - Cross-Site Request Forgery
Medium
CVE-2025-47650
Infility Global <= 2.15.34 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-54715
Barcode Scanner with Inventory & Order Manager <= 1.9.0 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2025-54054
12 Step Meeting List <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53219
WP-Database-Optimizer-Tools <= 0.2 - Cross-Site Request Forgery
High
CVE-2025-58206
MaxCoach <= 3.2.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-8451
Essential Addons for Elementor – Popular Elementor Templates and Widgets <= 6.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'data-gallery-items'
Medium
CVE-2025-54730
Embedder for Google Reviews <= 1.7.3 - Missing Authorization
Medium
CVE-2025-54712
Easy Elementor Addons <= 2.2.7 - Missing Authorization
Low
CVE-2025-8013
Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2025-53346
Thim Core <= 2.3.3 - Missing Authorization
Medium
CVE-2025-55713
Blocksy <= 2.1.6 - Authenticated (Shop manager+) Stored Cross-Site Scripting
High
CVE-2025-30975
Add Custom Codes <= 4.80 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2025-47588
Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.9 - Authenticated (Shop Manager+) Arbitrary Code Execution
Medium
CVE-2025-55711
WP Table Builder <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.