Critical
CVE-2025-31913
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2025-32289
Yozi <= 2.0.63 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48123
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Remote Code Execution
Critical
CVE-2025-39506
Nasa Core <= 6.3.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-31423
Umberto <= 1.2.8 - Unauthenticated PHP Object Injection
Critical
CVE-2025-32302
Winnex <= 1.3.2 - Unauthenticated Local File Inclusion
High
CVE-2025-31053
KBx Pro Ultimate < 8.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-47670
WordPress Social Login and Register <= 7.6.10 - Unauthenticated Local File Inclusion
Critical
CVE-2025-48126
Essential Real Estate <= 5.2.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-4611
Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode
Medium
CVE-2025-4219
DPEPress <= 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3781
Raisely Donation Form <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via raisely_donation_form Shortcode
Medium
CVE-2025-4217
WP YouTube Video Optimizer <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-4105
Splitit <= 4.2.8 - Missing Authorization to Multiple Administrative Actions
Medium
CVE-2025-4221
Animated Buttons <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12561
Affiliate Sales in Google Analytics and other tools <= 2.0.0 - Open Redirect
Medium
CVE-2025-3750
Network Posts Extended <= 7.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_height Parameter
High
CVE-2025-4803
Glossary by WPPedia <= 1.3.0 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-47941
The TYPO3 CMS Backend has Broken Authentication in Backend MFA
High
CVE-2025-47940
TYPO3 Allows Privilege Escalation to System Maintainer
Medium
CVE-2025-47939
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
Low
CVE-2025-47938
TYPO3 Unverified Password Change for Backend Users
Low
CVE-2025-47937
TYPO3 Allows Information Disclosure via DBAL Restriction Handling
Low
CVE-2025-47936
TYPO3 CMS Webhooks Server Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.