Medium
CVE-2025-10179
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-58994
Greenify <= 2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68974
Social Login and Register <= 7.7.0 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-9944
Professional Contact Form <= 1.0.0 - Cross-Site Request Forgery to Test Email Sending
Medium
CVE-2025-9899
Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-10499
Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Plugin Settings Update
Medium
CVE-2025-10498
Ninja Forms – The Contact Form Builder That Grows With You <= 3.12.0 - Cross-Site Request Forgery to Limited File Deletion
High
CVE-2025-60153
Subscribe To Unlock <= 1.1.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-49917
Icegram Express Pro <= 5.9.5 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2026-22422
Everest Forms <= 3.4.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-60160
Smart Related Products <= 2.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-60123
HivePress Claim Listings <= 1.1.3 - Missing Authorization
High
CVE-2025-60150
Subscribe to Download <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-60154
MWW Disclaimer Buttons <= 3.41 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-60106
EmailKit <= 1.6.0 - Missing Authorization to Authenticated (Author+) Arbitrary Content Deletion
High
CVE-2025-60126
Testimonial Slider <= 3.5.8.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-60108
LambertGroup - AllInOne - Banner with Thumbnails <= 3.8 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-60135
WeShare Buttons <= 13.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-68038
Icegram Express Pro <= 5.9.13 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-60122
HivePress Claim Listings <= 1.1.3 - Missing Authorization
Medium
CVE-2025-10377
System Dashboard <= 2.8.20 - Cross-Site Request Forgery
Medium
CVE-2025-64272
Email marketing for WordPress by GetResponse Official <= 1.5.3 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-9985
Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File
Medium
CVE-2025-54743
Download After Email 2.1.5 - 2.1.6 - Unauthorized Repeated Form Submissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.