High
CVE-2025-34146
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-7443
BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-5947
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
Critical
pysec-2025-72
num2words subjected to phishing attack, two versions published containing malware
Medium
ghsa-r54c-2xmf-2cf3
MS SWIFT Deserialization RCE Vulnerability
Critical
CVE-2025-5954
Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation
Medium
CVE-2025-24853
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
Medium
CVE-2025-24854
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin
Medium
CVE-2025-54685
SureDash <= 1.1.0 - Authenticated (Subscriber+) Information Disclosure
High
CVE-2025-52737
Store Locator <= 2.2.260 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2025-48158
BuddyPress XProfile Custom Image Field <= 3.0.1 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-52732
Google Map Targeting <= 1.1.6 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-48148
StoreKeeper for WooCommerce <= 14.4.4 - Unauthenticated Arbitrary File Upload
High
CVE-2025-54686
Exertio <= 1.3.2 - Unauthenticated PHP Object Injection
High
CVE-2025-48165
DELUCKS SEO <= 2.6.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-28987
PressForward <= 5.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-52720
Super Store Finder <= 7.5 - Unauthenticated SQL Injection
Medium
CVE-2025-60182
Support Board < 3.8.7 - Reflected Cross-Site Scripting
High
CVE-2025-49887
Product XML Feed Manager for WooCommerce <= 2.9.3 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-54748
MapSVG < 8.6.12 - Authenticated (Contributor+) Arbitrary File Download
High
CVE-2025-30633
Amazon Native Shopping Recommendations <= 1.3 - Unauthenticated SQL Injection
Medium
CVE-2025-52823
Cube Portfolio <= 1.16.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-7205
GiveWP – Donation Plugin and Fundraising Platform <= 4.5.0 - Authenticated (GiveWP worker+) Stored Cross-Site Scripting
Medium
CVE-2025-54656
Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.