Medium
CVE-2025-10636
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-67599
WebToffee eCommerce Marketing Automation <= 2.1.1 - Missing Authorization
High
CVE-2025-64364
Masterstudy < 4.8.126 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-12521
Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
High
CVE-2025-64363
Kleo < 5.5.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-11632
Call Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
High
CVE-2025-64206
Jannah <= 7.6.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-10008
Translate WordPress and go Multilingual – Weglot <= 5.1 - Missing Authorization to Unauthenticated Limited Transient Deletion
Medium
CVE-2025-11881
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Medium
CVE-2025-11627
Site Checkup AI Troubleshooting with Wizard and Tips for Each Issue <= 1.47 - Unauthenticated Log File Poisoning
High
CVE-2025-62075
Simple Payment <= 2.4.6 - Unauthenticated Local File Inclusion
High
CVE-2025-64205
Jannah <= 7.6.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-11705
Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2025-64353
Polylang <= 3.7.3 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-66525
Elastic Email Sender <= 1.2.20 - Missing Authorization
Medium
CVE-2015-10146
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
High
CVE-2025-68066
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-64359
Consulting < 6.7.5 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-9501
W3 Total Cache <= 2.8.12 - Unauthenticated Command Injection
High
CVE-2025-64360
Consulting Elementor Widgets <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-63036
Ronneby Theme Core <= 1.5.68 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-64203
Mailster < 4.1.14 - Reflected Cross-Site Scripting
Medium
CVE-2025-11976
FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) <= 1.1.23.0 - Cross-Site Request Forgery to Sync Rule Creation
Medium
CVE-2025-11893
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.