Critical
CVE-2024-9193
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-8425
WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload
High
CVE-2024-12811
Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-0764
wpForo Forum <= 2.4.1 - Authenticated (Subscriber+) Arbitrary File Read in update
Medium
CVE-2024-13905
OneStore Sites <= 0.1.1 - Unauthenticated Blind Server-Side Request Forgery
High
CVE-2025-1282
Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read
Medium
CVE-2024-13907
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2025-27272
VG PostCarousel <= 1.1 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-26936
Fresh Framework <= 1.70.0 - Unauthenticated Remote Code Execution
Medium
CVE-2024-13695
Enfold <= 6.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery via attachment_id
Critical
CVE-2025-26970
Ark Theme Core <= 1.70.0 - Unauthenticated Remote Code Execution
Medium
CVE-2025-26940
Pie Register Premium <= 3.8.3.2 - Authenticated (Subscriber+) Limited File Deletion
High
CVE-2025-26916
Massive Dynamic <= 8.2 - Unauthenticated Local File Inclusion
High
CVE-2025-26935
WP Job Portal <= 2.2.8 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-26905
Estatik <= 4.3.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-26907
Estatik Mortgage Calculator <= 2.0.12 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-26933
WC Place Order Without Payment <= 2.6.7 - Unauthenticated Local File Inclusion
High
CVE-2025-26964
Eventin <= 4.0.20 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-26932
ChatBot <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-26986
Pearl - Corporate Business < 3.4.8 - Unauthenticated Local File Inclusion
Critical
CVE-2025-26985
Majestic Support <= 1.0.6 - Unauthenticated Local File Inclusion
High
CVE-2025-26957
Affiliate Coupons <= 1.7.3 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-26979
Funnel Builder by FunnelKit <= 3.9.0 - Unauthenticated Local File Inclusion
High
CVE-2025-26540
Helloprint <= 2.0.7 - Authenticated (Subscriber+) Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.