Medium
CVE-2025-62015
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-62026
Blockspare <= 3.2.13.2 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2025-59578
Free Follow-Up Emails & Marketing Automation for WooCommerce – ShopMagic <= 4.5.6 - Unauthenticated Information Exposure
Medium
CVE-2025-10660
WP Dashboard Chat <= 1.0.3 - Authenticated (Contributor+) SQL Injection via id
Medium
CVE-2025-10682
TARIFFUXX <= 1.4 - Authenticated (Contributor+) SQL Injection via tariffuxx_configurator Shortcode
High
CVE-2025-11177
External Login <= 1.11.2 - Unauthenticated SQL Injection via log
Medium
CVE-2025-11365
WP Google Map Plugin <= 1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-10045
onOffice for WP-Websites <= 6.5.1 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-10310
Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-10575
WP jQuery Pager <= 1.4.0 - Authenticated (Contributor+) SQL Injection via Shortcode
High
CVE-2025-10743
Outdoor <= 1.3.2 - Unauthenticated SQL Injection
Medium
CVE-2025-10730
Wp tabber widget <= 4.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-11501
Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection
Medium
CVE-2025-62955
TempTool [Show Current Template Info] <= 1.3.1 - Authenticated (Contributor+) Information Exposure
Medium
CVE-2025-59579
Simple Job Board <= 2.13.7 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-48089
HiStudy - Online Courses & Education Template < 3.1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-64213
MasterStudy LMS Pro < 4.7.16 - Authenticated (Subscriber+) Information Exposure
High
CVE-2025-62039
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.6.6 - Unauthenticated Information Exposure
Medium
CVE-2025-62038
MeetingHub <= 1.23.9 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-10175
WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-9975
WP Scraper <= 5.8.1 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2025-9947
Custom 404 Pro <= 3.12.0 - Authenticated (Administrator+) SQL Injection via `path` Parameter
Medium
CVE-2025-9196
Trinity Audio <= 5.21.0 - Unauthenticated Information Exposure
Medium
CVE-2025-10185
NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.