Medium
CVE-2025-39487
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Medium
CVE-2025-52776
Video List Manager <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2025-52828
Red Art <= 3.8 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-50039
VG WORT METIS <= 2.0.1 - Missing Authorization
Medium
CVE-2025-4302
Stop User Enumeration <= 1.7.2 - Protection Mechanism Bypass
Medium
CVE-2025-5398
Ninja Forms <= 3.10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSTI
Medium
CVE-2025-49247
Team Showcase < 25.05.13 - Reflected Cross-Site Scripting
Critical
CVE-2025-6688
Simple Payment 1.3.6 - 2.3.8 - Authentication Bypass to Admin
Medium
CVE-2025-49303
Frontend Admin by DynamiApps <= 3.28.7 - Authenticated (Editor+) Arbitrary File Deletion
Medium
CVE-2025-39362
Mollie Payments for WooCommerce <= 8.0.2 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2025-24771
Content Manager Light <= 3.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-28968
WP Wall <= 1.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-52798
JobSearch < 3.0.6 - Reflected Cross-Site Scripting
Critical
CVE-2024-12827
DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset
Medium
CVE-2025-52796
WP-Recall <= 16.26.14 - Reflected Cross-Site Scripting
Medium
CVE-2025-32311
Pressroom - News Magazine WordPress Theme <= 7.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-31037
Homey <= 2.4.5 - Reflected Cross-Site Scripting
High
CVE-2025-2940
Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-5338
Royal Elementor Addons <= 1.7.1028 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Multiple Widgets
High
CVE-2025-6212
Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module
Medium
CVE-2025-5842
Modern Design Library <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameter
Unrated
CVE-2025-6677
drupal/paragraphs_table - SA-CONTRIB-2025-084
Unrated
CVE-2025-6676
drupal/simple_sitemap - SA-CONTRIB-2025-083
Unrated
CVE-2025-6675
drupal/miniorange_2fa - SA-CONTRIB-2025-082
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.