Low
CVE-2025-9263
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Low
CVE-2025-9264
xxl-job Jobs Handler remove function allows improper control of resource identifiers via ID parameter
Low
CVE-2025-9262
wong2 mcp-cli Command Injection Vulnerability
Medium
CVE-2025-48343
WPMU Ldap Authentication <= 5.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-60222
SUMO Memberships for WooCommerce <= 7.8.0 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2025-9314
Developer Tools <= 1.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-49388
Miraculous Core <= 2.0.7 - Unauthenticated Privilege Escalation
Medium
CVE-2025-52755
Child Themes <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-48349
Video Gallery – Vimeo and YouTube Gallery <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-9034
Wp Edit Password Protected <= 1.3.4 - Open Redirect
Medium
CVE-2025-48327
WP Mailgun SMTP <= 1.0.7 - Missing Authorization
Critical
CVE-2025-54738
Jobmonster <= 4.7.9 - Authentication Bypass
Medium
CVE-2025-53348
Kalium <= 3.18.3 - Missing Authorization
Medium
8bd77afe-585d-445e-adfd-48c5e0c4dca9
Super Store Finder <= 7.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-48350
AutoWP <= 2.2.2 - Missing Authorization
High
CVE-2025-53244
Magazine Elite <= 1.2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58938
IDonatePro <= 2.1.9 - Missing Authorization
High
CVE-2025-53248
Magazine <= 1.2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-58939
Super Store Finder <= 7.5 - Cross-Site Request Forgery
Medium
CVE-2025-48347
bxSlider integration for WordPress <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-53216
Glamer <= 1.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-58998
s2Member <= 250701 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48354
Better Post & Filter Widgets for Elementor <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48355
ProveSource Social Proof <= 3.1.2 - Unauthenticated Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.