Medium
CVE-2025-63051
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-67565
Rehub <= 19.9.9.1 - Unauthenticated Information Exposure
Medium
CVE-2025-12721
g-FFL Cockpit <= 1.7.1 - Missing Authorization to Unauthenticated Information Exposure
Medium
CVE-2025-13922
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY Clause
Medium
CVE-2025-67948
SendPulse Email Marketing Newsletter <= 2.2.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-67470
Portfolio and Projects <= 1.5.5 - Authenticated (Contributor+) Information Exposure
High
CVE-2025-12850
My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id
Medium
CVE-2025-12133
EPROLO Dropshipping <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Tracking Data Modification
Medium
CVE-2025-13006
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposure
Medium
CVE-2025-63009
Google Analytics Events <= 2.8.2 - Unauthenticated Information Exposure
Medium
CVE-2025-62735
User Spam Remover <= 1.1 - Unauthenticated Information Exposure
Medium
CVE-2025-68494
Premium Addons for Elementor <= 4.11.53 - Unauthenticated Information Exposure
Medium
CVE-2025-62737
Image Cleanup <= 1.9.2 - Unauthenticated Information Exposure
Medium
CVE-2025-62994
AI CoPilot <= 1.2.7 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-11379
WebP Express <= 0.25.9 - Unauthenticated Information Exposure
Medium
CVE-2025-13359
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-13495
FluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' Parameter
Medium
CVE-2025-12585
MxChat – AI Chatbot for WordPress <= 2.5.5 - Unauthenticated Information Exposure
Medium
CVE-2025-13090
WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection
High
CVE-2025-13724
VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter
Medium
CVE-2025-13696
Zigaform <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint
Medium
CVE-2025-12483
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-64270
Masteriyo - LMS <= 2.0.3 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-66095
KiviCare <= 3.6.13 - Authenticated (Patient+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.