High
CVE-2025-49137
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Medium
CVE-2025-3076
Elementor Pro <= 3.29.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-4387
Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-4601
RH - Real Estate WordPress Theme <= 4.4.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-5925
Bunny’s Print CSS <= 0.95 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-49130
Laravel Translation Manager Vulnerable to Stored Cross-site Scripting
High
CVE-2025-47561
MapSVG < 8.6.13 - Authenticated (Contributor+) Privilege Esclation
High
CVE-2025-3745
WP Lightbox 2 <= 3.0.6.7 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2023-25999
BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-24767
TicketBAI Facturas para WooCommerce <= 3.19 - Unauthenticated SQL Injection
Critical
CVE-2025-23974
One-Login <= 1.4 - Unauthenticated Privilege Esclation
Critical
CVE-2025-24768
Nitan <= 2.9 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49297
Grill and Chow <= 1.6 - Unauthenticated Local File Inclusion
High
CVE-2025-26592
Multiple Themes by axiomthemes, ThemeRex, and AncoraThemes <= 1.18.0 - Unauthenticated Local File Inclusion
High
CVE-2025-32222
Widget Logic <= 6.0.5 - Authenticated (Contributor+) Remote Code Execution
Critical
CVE-2023-26005
Fitrush <= 1.3.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49451
Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery <= 1.0.12 - Unauthenticated Directory Traversal
High
CVE-2025-49454
TinySalt < 3.10.0 - Unauthenticated Local File Inclusion
High
CVE-2025-31635
CLEVER <= 2.6 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-5730
Easy Contact Form Lite <= 1.1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-49295
MediClinic <= 2.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-28944
Avaz <= 2.8 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49507
CozyStay < 1.7.1 - Unauthenticated PHP Object Injection
Critical
CVE-2025-28992
SNS Anton <= 4.1 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.