Medium
CVE-2025-48097
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,631
High
CVE-2025-58953
Joly <= 1.22.0 - Unauthenticated Local File Inclusion
High
CVE-2025-10862
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'
Medium
CVE-2025-48096
Custom CSS <= 1.4.0 - Missing Authorization
Medium
CVE-2025-48091
AnyComment <= 0.3.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-10249
Slider Revolution <= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read
Medium
CVE-2025-60246
Simple Finance Calculator <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2026-28080
Rank Math SEO PRO <= 3.0.96 - Missing Authorization
Medium
CVE-2025-48093
Password only login <= 0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-9544
Doppler Forms = 2.5.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
Critical
CVE-2025-61778
Akka.Remote TLS did not properly implement certificate-based authentication
Low
CVE-2025-61670
Wasmtime: Memory leak in C API with `externref` and `anyref` types
Medium
CVE-2025-11171
Chartify – WordPress Chart Plugin <= 3.5.9 - Missing Authentication for Administrative Function
High
CVE-2025-11204
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-10494
Motors – Car Dealership & Classified Listings Plugin <= 1.4.89 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-10587
Community Events <= 1.5.1 - Unauthenticated SQL Injection
Medium
CVE-2025-13033
Nodemailer: Email to an unintended domain can occur due to Interpretation Conflict
High
CVE-2025-11362
pdfmake is vulnerable to Throttling via repeatedly redirecting URL in file embedding
Medium
CVE-2025-43824
Liferay Profile Widget does not prevent vCard extension spoofing
Medium
CVE-2025-62933
Awesome Testimonials <= 2.2.1 - Cross-Site Request Forgery
High
CVE-2025-59550
Xcare < 6.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-62934
WP Business Hours <= 1.4 - Cross-Site Request Forgery
High
CVE-2025-58952
Neuronet < 1.14.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48099
Search & Filter <= 1.2.17 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.