High
CVE-2025-48090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-53328
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0 - Unauthenticated Local File Inclusion
High
CVE-2025-53326
Gutenify <= 1.5.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6247
WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-5931
Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation
High
CVE-2025-53584
WP Ticket Customer Service Software & Support Ticket System <= 6.0.2 - Unauthenticated PHP Object Injection
High
CVE-2025-53243
Employee Directory – Staff Listing & Team Directory Plugin for WordPress <= 4.5.5 - Unauthenticated PHP Object Injection
High
CVE-2025-53572
WP Easy Contact <= 4.0.1 - Unauthenticated PHP Object Injection
High
CVE-2025-54731
YouTube Showcase <= 3.5.1 - Unauthenticated PHP Object Injection
High
CVE-2025-53227
Magazine Saga <= 1.2.7 - Unauthenticated Local File Inclusion
High
CVE-2025-53334
Jannah < 7.5.1 - Unauthenticated Local File Inclusion
High
58df5dc1-c56a-43ba-ad5a-b700351b42dc
Nuss <= 1.3.3 - Unauthenticated Local File Inclusion
High
CVE-2025-53583
Employee Spotlight <= 5.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-8562
Custom Query Shortcode <= 0.4.0 - Authenticated (Contributor+) Path Traversal via lens Parameter
Medium
CVE-2025-48320
百度分享按钮 <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-58890
Playful <= 1.19.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58900
UniTravel <= 1.4.2 - Unauthenticated Local File Inclusion
High
CVE-2025-58896
Otaku <= 1.8.0 - Unauthenticated Local File Inclusion
High
CVE-2025-60042
Chinchilla <= 1.16 - Unauthenticated Local File Inclusion
High
CVE-2025-58901
Takeout <= 1.3.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54745
miniOrange's Google Authenticator <= 6.1.1 - Missing Authorization
High
CVE-2025-60082
PDF for WPForms <= 6.5.0 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2025-58891
Sanger <= 1.24.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58895
Integro <= 1.8.0 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.