Medium
CVE-2025-12502
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-12521
Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
Medium
CVE-2025-11881
AppPresser – Mobile App Framework <= 4.5.0 - Missing Authorization to Unauthenticated Limited Sensitive Information Exposure
Medium
CVE-2015-10147
Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection
Medium
CVE-2015-10146
Thumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
High
CVE-2025-11735
HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter
Medium
CVE-2025-63071
Shortcodes and extra features for Phlox <= 2.17.13 - Unauthenticated Information Exposure
High
CVE-2025-9322
Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL Injection
Medium
CVE-2025-11893
Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-11760
eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams <= 1.5.6 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-8416
Product Filter by WBW <= 2.9.7 - Unauthenticated SQL Injection
High
CVE-2025-4203
wpForo Forum <= 2.4.8 - Unauthenticated SQL Injection via get_members Function
Medium
CVE-2025-10748
RapidResult <= 1.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-64366
MasterStudy LMS <= 3.6.27 - Authenticated (Instructor+) SQL Injection
Medium
CVE-2025-10638
NS Maintenance Mode for WP <= 1.3.1 - Unauthenticated Information Exposure
Medium
CVE-2025-6833
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out
Medium
CVE-2025-10047
Email Tracker <= 5.3.15 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-62979
ACF to REST API <= 3.3.4 - Unauthenticated Information Exposure
Medium
CVE-2025-10750
PowerBI Embed Reports <= 1.2.0 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-11741
WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure
High
CVE-2025-11691
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection
An unauthenticated SQL injection vulnerability in PPOM for WooCommerce allows attackers to extract sensitive database information when Legacy Price Calculations are enabled.
Medium
CVE-2025-10187
GSpeech TTS – WordPress Text To Speech Plugin <= 3.17.13 - Authenticated (Admin+) SQL injection
Medium
CVE-2025-62062
Easy Post Submission <= 1.7.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-59575
MasterStudy LMS <= 3.6.20 - Authenticated (Instructor+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.