Medium
CVE-2025-49914
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Low
CVE-2025-49300
Traveler Option Tree <= 2.8 - Authenticated (Editor+) Information Exposure
Medium
CVE-2025-11980
Quick Featured Images <= 13.7.3 - Authenticated (Editor+) SQL Injection via delete_orphaned
High
CVE-2025-11452
Asgaros Forum <= 3.1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-12098
Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'
Medium
CVE-2025-64371
Traveler < 3.2.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-11972
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL Injection
High
CVE-2025-49918
VikBooking Hotel Booking Engine & PMS <= 1.8.2 - Unauthenticated Information Exposure
Medium
CVE-2025-66056
Uncanny Automator < 6.10.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-63007
EventPrime <= 4.2.4.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-10683
Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid
Medium
CVE-2025-63013
Hotel Booking <= 2.2.7 - Unauthenticated Information Exposure
Critical
CVE-2025-12061
Tax Service Electronic HDM <= 1.2.0 - Unauthenticated Arbitrary SQL Injection
Medium
CVE-2025-12468
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-12139
File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2025-11749
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
High
CVE-2025-12197
The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via s
Medium
CVE-2025-64228
SUMO Affiliates Pro <= 11.0.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12677
KiotViet Sync <= 1.8.5 - Unauthenticated Webhook Key Exposure
Medium
CVE-2025-11758
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure
Critical
CVE-2025-11008
CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
High
CVE-2025-12394
Backup Migration <= 1.4.9 - Information Exposure to Unauthenticated Back-up Download
Medium
CVE-2025-11740
wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection
Medium
CVE-2025-11377
List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.