Medium
CVE-2025-54685
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-52720
Super Store Finder <= 7.5 - Unauthenticated SQL Injection
High
CVE-2025-30633
Amazon Native Shopping Recommendations <= 1.3 - Unauthenticated SQL Injection
Medium
CVE-2025-52823
Cube Portfolio <= 1.16.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-8401
HT Mega – Absolute Addons For Elementor <= 2.9.1 - Authenticated (Author+) Sensitive Information Exposure
Medium
CVE-2025-6348
Smart Slider 3 <= 3.5.1.28 - Authenticated (Administrator+) SQL Injection via `sliderid` Parameter
Medium
CVE-2025-60188
Atarim <= 4.2.1 - Unauthenticated Information Exposure
High
CVE-2025-6495
Bricks Builder <= 1.12.4 - Unauthenticated SQL Injection via `p` Parameter
Medium
CVE-2025-52820
WooCommerce Point Of Sale (POS) <= 1.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-49033
ProfileGrid <= 5.9.5.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-8009
Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read
Medium
CVE-2025-30998
WP Links Page <= 4.9.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-6717
B1.lt for WooCommerce <= 2.2.56 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-7638
Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.45.0 - Authenticated (Administrator+) SQL Injection via `order_by` Parameter
Medium
CVE-2025-5816
Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details
High
CVE-2025-49931
JetSearch <= 3.5.10 - Unauthenticated SQL Injection
Medium
CVE-2025-54043
SMTP for Amazon SES <= 1.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-53993
JetPopup <= 2.0.15 - Authenticated (Subscriber+) Information Disclosure
High
CVE-2025-54048
Custom API for WP <= 4.2.2 - Unauthenticated SQL Injection
Medium
CVE-2025-48161
YaySMTP <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-48299
YayExtra <= 1.5.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-53985
JetTabs <= 2.2.9 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-54008
JetSmartFilters <= 3.6.7 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-48301
SMTP for SendGrid – YaySMTP <= 1.5 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.