Medium
CVE-2025-2078
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
Medium
CVE-2025-1508
WP Crowdfunding <= 2.1.14 - Missing Authorization to Authenticated (Subscriber+) Post Content Download
Medium
CVE-2025-2076
binlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-2077
Simple Amazon Affiliate <= 1.0.9 - Reflected Cross-Site Scripting
High
CVE-2025-1550
Arbitrary Code Execution via Crafted Keras Config for Model Loading
Medium
CVE-2025-26929
Accounting for WooCommerce <=1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-28857
Rankchecker.io Integration <= 1.0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10144
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10679
Quiz and Survey Master (QSM) <= 9.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13498
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-28927
Display Template Name <= 1.7.1 - Cross-Site Request Forgery
Medium
CVE-2025-28860
Google News Editors Picks Feed Generator <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-26564
GNUCommerce <= 1.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-28859
Maintenance Notice <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-28910
WP Hide Admin Bar <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2025-28919
Easy Image Display <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-28868
ZipList Recipe <= 3.1 - Cross-Site Request Forgery
Medium
CVE-2025-28875
BP Email Assign Templates <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-28908
pipDisqus <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-1527
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) <= 3.1.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Flash Sale Countdown Module
Medium
CVE-2025-28879
Bee Layer Slider <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-28922
Go To Top <= 0.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-28870
amoCRM WebForm <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26565
GNUPress <= 0.2.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.