Medium
CVE-2024-8393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2025-60062
tPlayer <= 1.2.1.6 - Unauthenticated SQL Injection
Medium
CVE-2025-49897
Vertical scroll slideshow gallery v2 <= 9.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-8105
Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-49432
Ultimate Video Player <= 10.1 - Missing Authorization
Medium
95550fd3-13e5-4341-8551-efe9070b0ada
WP Discord Post Plus - Supports Unlimited Channels <= 1.0.2 - Cross-Site Request Forgery
Medium
CVE-2025-8878
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.4 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-49896
School Management <= 93.1.0 - Unauthenticated Insecure Direct Object Reference
High
CVE-2025-8142
Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Medium
CVE-2025-52748
Directory Pro <= 2.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-8944
OceanWP <= 4.1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2024-12575
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure
Medium
CVE-2025-49898
Dropshix <= 4.0.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-60087
Extensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-15655
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Medium
CVE-2025-52749
Uji Countdown <= 2.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-48108
School Management <= 93.2.0 - Missing Authorization
Medium
CVE-2025-8091
EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-8905
Inpersttion For Theme <= 1.0 - Authenticated (Contributor+) Arbitrary Function Call
Medium
CVE-2025-7662
Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2025-7778
Icons Factory <= 1.6.12 - Missing Authorization to Unauthenticated Arbitrary File Deletion via delete_files() Function
High
CVE-2025-7641
Assistant for NextGEN Gallery <= 1.0.9 - Unauthenticated Arbitrary Directory Deletion
Medium
CVE-2025-7688
Add User Meta <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-7650
BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.