Medium
CVE-2025-62947
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-53232
WP Gmail SMTP <= 1.0.7 - Sensitive Information Exposure
Medium
CVE-2025-10048
My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-53218
AppExperts <= 1.4.5 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2025-10586
Community Events <= 1.5.1 - Unauthenticated SQL Injection
High
CVE-2025-10862
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'
Medium
CVE-2025-48091
AnyComment <= 0.3.6 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-11204
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection
Critical
CVE-2025-10587
Community Events <= 1.5.1 - Unauthenticated SQL Injection
Medium
CVE-2025-10649
Welcart e-Commerce <= 2.11.21 - Authenticated (Author+) SQL Injection via Cookie
Medium
CVE-2025-10645
WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log
Medium
CVE-2025-62925
Conversios.io <= 7.2.13 - Missing Authorization
Medium
CVE-2025-11227
GiveWP – Donation Plugin and Fundraising Platform <= 4.10.0 - Missing Authorization to Unauthenticated Forms and Campaigns Disclosure
Critical
CVE-2025-10726
WPRecovery <= 2.0 - Unauthenticated SQL Injection to Arbitrary File Deletion
Medium
CVE-2025-9199
Woo superb slideshow transition gallery with random effect <= 9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-9198
Wp cycle text announcement <= 8.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-10582
WP Dispatcher <= 1.3.0 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-9200
Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection
Medium
CVE-2025-58999
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Cross-Site Request Forgery
Medium
CVE-2025-63070
Download Manager <= 3.3.32 - Authenticated (Subscriber+) Information Exposure
High
CVE-2025-8877
AffiliateWP <= 2.28.2 - Unauthenticated SQL Injection
Medium
CVE-2025-62093
Image&Video FullScreen Background <= 1.6.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-68056
LBG Zoominoutslider <= 5.4.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-62906
Referral Link Tracker <= 1.1.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.