Medium
CVE-2025-53201
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-53559
Universal Video Player - Addon for WPBakery Page Builder <= 3.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-48159
Youtube Vimeo Video Player and Slider WP Plugin <= 3.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-54056
Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-52788
CaptionPix <= 1.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-8009
Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read
Critical
CVE-2025-8047
Multiple Plugins by itayamar - Backdoored Software
High
CVE-2025-49924
Wholesale Suite <= 2.2.4.2 - Authenticated (Shop Manager+) Privilege Escalation
Medium
CVE-2025-48162
Simple Business Directory Pro <= 15.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-47689
Video Blogster Lite <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-4968
WPBakery Page Builder <= 8.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Page Builder Elements
High
CVE-2025-25172
VidMov <= 1.9.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54027
Support Board <= 3.8.0 - Reflected Cross-Site Scripting
Unrated
830
rsdirectory
Medium
CVE-2025-51481
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the not
High
CVE-2024-5187
onnx allows Arbitrary File Overwrite in download_model_with_test_data
Medium
CVE-2025-5818
Featured Image Plus – Quick & Bulk Edit with Unsplash <= 1.6.6 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2025-7722
Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-6190
Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function
Medium
CVE-2025-6054
YANewsflash <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-6214
Omnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint
Medium
CVE-2025-6215
Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint
Medium
CVE-2025-5753
Valuation Calculator <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via link Parameter
Medium
CVE-2025-6261
Fleetwire Fleet Management Plugin <= 1.0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via fleetwire_list Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.