High
CVE-2025-54014
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-60190
Immocaster WordPress <= 1.3.6 - Unauthenticated Local File Inclusion
Critical
CVE-2025-60195
Atarim <= 4.2.1 - Unauthenticated Privilege Escalation
High
CVE-2025-6991
Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-8097
WoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart Manipulation
High
CVE-2025-48298
SEOPress for MainWP <= 1.4 - Unauthenticated Local File Inclusion
High
CVE-2025-48293
Geo Mashup <= 1.13.16 - Unauthenticated Local File Inclusion
High
CVE-2025-60196
Clearblue® Ovulation Calculator <= 1.2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6262
muse.ai video embedding <= 0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via muse-ai Shortcode
Critical
CVE-2025-6441
Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition <= 4.03.32 - Unauthenticated Login Token Generation to Authentication Bypass
Medium
CVE-2025-7780
AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
High
CVE-2025-7695
Dataverse Integration 2.77 - 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route
Critical
CVE-2025-6715
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
High
CVE-2025-48171
Cena Store <= 2.11.26 - Unauthenticated Local File Inclusion
Critical
CVE-2025-8047
Multiple Plugins by itayamar - Backdoored Software
High
CVE-2025-49924
Wholesale Suite <= 2.2.4.2 - Authenticated (Shop Manager+) Privilege Escalation
High
CVE-2025-25172
VidMov <= 1.9.4 - Unauthenticated Local File Inclusion
High
CVE-2025-6190
Realty Portal – Agent <= 0.3.9 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via rp_user_profile() Function
Medium
CVE-2025-6214
Omnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint
High
CVE-2025-3703
CSS & JavaScript Toolbox < 12.0.3 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-60198
Saxon - Viral Content Blog & Magazine Marketing WordPress <= 1.9.3 - Unauthenticated Local File Inclusion
High
CVE-2025-60197
Simple Contact Forms <= 1.6.4 - Unauthenticated Local File Inclusion
High
CVE-2025-54031
Support Board <= 3.8.0 - Unauthenticated Local File Inclusion
High
CVE-2025-48160
Caliris <= 1.5 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.