Medium
CVE-2025-47575
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-39505
Goodlayers Hotel <= 3.1.4 - Reflected Cross-Site Scripting
Critical
CVE-2025-47552
DZS Video Gallery <= 12.39 - Unauthenticated PHP Object Injection
Medium
CVE-2025-31642
WPCHURCH <= 2.7.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-48129
Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light <= 2.4.37 - Unauthenticated Privilege Escalation
Critical
CVE-2025-4524
Madara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-47568
ZoomSounds <= 6.91 - Unauthenticated PHP Object Injection
Critical
CVE-2025-48290
Multiple Themes by bslthemes <= Various Version - Unauthenticated Local File Inclusion
High
CVE-2025-47663
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-39485
Grand Tour | Travel Agency WordPress <= 5.5.1 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39503
Goodlayers Hotel <= 3.1.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-46259
The Plus Addons for Elementor Pro <= 6.3.6 - Missing Authorization
Medium
CVE-2025-47613
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-39502
Goodlayers Hostel <= 3.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-48143
Formulario de contacto SalesUp! <= 1.0.14 - Reflected Cross-Site Scripting
Critical
CVE-2025-39500
Goodlayers Hostel <= 3.1.2 - Unauthenticated PHP Object Injection
Medium
CVE-2025-31636
WP Post Modules for Elementor <= 2.5.0 - Reflected Cross-Site Scripting
Critical
CVE-2025-39495
Avantage <= 2.4.9 - Unauthenticated PHP Object Injection
Critical
CVE-2025-39499
Medicare <= 2.1.0 - Unauthenticated PHP Object Injection
High
CVE-2025-4840
Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
High
CVE-2025-31924
Crafts & Arts <= 2.5 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-47949
samlify SAML Signature Wrapping attack
Medium
CVE-2025-47946
Symfony UX allows unsanitized HTML attribute injection via ComponentAttributes
High
CVE-2025-47944
Multer vulnerable to Denial of Service from maliciously crafted requests
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.