High
CVE-2024-12612
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-49915
SMS Alert Order Notifications <= 3.8.5 - Unauthenticated SQL Injection
High
CVE-2025-60062
tPlayer <= 1.2.1.6 - Unauthenticated SQL Injection
Medium
CVE-2025-49897
Vertical scroll slideshow gallery v2 <= 9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-15655
School Management <= 93.2.0 - Authenticated (Support staff+) SQL Injection
Medium
CVE-2025-8091
EventON Lite <= 2.4.7 - Authenticated (Contributor+) Information Disclosure
Medium
CVE-2025-7662
Gestion de tarifs <= 1.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-8676
B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-55708
Quiz And Survey Master <= 10.2.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-55710
Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.37.2 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-54736
Savoy <= 3.0.8 - Unauthenticated Information Exposure
Medium
CVE-2025-53340
Awesome Support <= 6.3.6 - Information Exposure
High
CVE-2025-6184
Tutor LMS Pro – eLearning and online course solution <= 3.7.0 - Authenticated (Tutor Instructor+) SQL Injection
Medium
CVE-2025-49267
Frontend Admin by DynamiApps <= 3.28.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-8314
Software Issue Manager <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
Medium
CVE-2025-4390
WP Private Content Plus <= 3.6.2 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-54669
MapSVG < 8.7.4 - Unauthenticated SQL Injection
High
CVE-2025-54678
Easy Form Builder <= 3.8.15 - Unauthenticated SQL Injection
High
CVE-2025-8420
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
High
CVE-2025-7036
CleverReach WP <= 1.5.20 - Unauthenticated SQL Injection via title Parameter
Medium
CVE-2025-6986
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
Medium
CVE-2025-8620
GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure
Medium
CVE-2025-6832
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-6722
BitFire <= 4.5 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.