High
CVE-2025-53588
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-48100
bidorbuy Store Integrator <= 2.12.0 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2025-48313
Tripadvisor Shortcode <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48308
Newsletter subscription optin module <= 1.2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-48304
Google XML News Sitemap plugin <= 0.02 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-53243
Employee Directory – Staff Listing & Team Directory Plugin for WordPress <= 4.5.5 - Unauthenticated PHP Object Injection
High
CVE-2025-53572
WP Easy Contact <= 4.0.1 - Unauthenticated PHP Object Injection
High
CVE-2025-54731
YouTube Showcase <= 3.5.1 - Unauthenticated PHP Object Injection
High
CVE-2025-53227
Magazine Saga <= 1.2.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48309
BetPress <= 1.0.1 Lite - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-53334
Jannah < 7.5.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48316
Responsive Mobile-Friendly Tooltip <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48306
Savyour Affiliate Partner <= 2.1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-48305
Goal Tracker for Patreon <= 0.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49402
Houzez CRM <= 1.4.7 - Missing Authorization
Medium
CVE-2025-53230
Page Manager for Elementor <= 2.0.5 - Missing Authorization
High
58df5dc1-c56a-43ba-ad5a-b700351b42dc
Nuss <= 1.3.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-53224
NextGEN Gallery Search <= 2.12 - Reflected Cross-Site Scripting
Medium
CVE-2025-4956
Pro Bulk Watermark Plugin for WordPress <= 2.0 - Authenticated (Subscriber+) Path Traversal
Medium
CVE-2025-53223
Theme Switcher Reloaded <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-48315
WordPress HTML <= 0.51 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-53583
Employee Spotlight <= 5.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48314
Add Code To Head <= 1.17 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48312
WPAvatar <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.