Medium
CVE-2025-27002
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2025-47474
Anarkali <= 1.0.9 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24375
Ultimate Gift Cards for WooCommerce <= 3.2.4 - Missing Authorization
Medium
CVE-2025-49043
Magic Responsive Slider and Carousel WordPress <= 1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-14360
Blockons <= 1.2.15 - Missing Authorization
Medium
CVE-2026-24371
BA Book Everything <= 1.8.16 - Missing Authorization
Medium
CVE-2025-49045
Super Interactive Maps <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-0675
NextGEN Download Gallery <= 1.6.2 - Unauthenticated Information Exposure
Medium
CVE-2025-69169
Easy Media Download <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48094
Magic Slider <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-0674
Campaign Monitor for WordPress <= 2.9.1 - Missing Authorization
Medium
CVE-2025-22713
WooCommerce Orders & Customers Exporter <= 5.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24387
WP Quick Post Duplicator <= 2.1 - Missing Authorization
Medium
CVE-2026-24358
Quiz And Survey Master <= 10.3.3 - Missing Authorization
Medium
CVE-2025-27004
Famous - Responsive Image And Video Grid Gallery WordPress <= 1.4 - Reflected Cross-Site Scripting
High
CVE-2025-22725
Virtual Assistant <= 3.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-50003
Amuli <= 2.3.0 - Unauthenticated Local File Inclusion
High
CVE-2025-49055
Lead Capturing Pages <= 2.5 - Unauthenticated SQL Injection
High
CVE-2025-54003
Depot <= 1.16 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22726
nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2026-27090
Kenta Companion <= 1.3.3 - Cross-Site Request Forgery
Medium
CVE-2025-22715
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2026-22186
Bio-Formats has an XML External Entity (XXE) vulnerability
Medium
CVE-2026-22187
Bio-Formats performs unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.