Medium
CVE-2025-6201
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-39486
Rankie - Wordpress Rank Tracker Plugin < 1.8.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-5673
Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter
Medium
CVE-2026-28136
SMS <= 6.9.12 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-5487
AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions
Medium
CVE-2025-5920
Sharable Password Protected Posts <= 1.1.0 - Unauthenticated Password protected Post Exposure
Medium
CVE-2025-49378
Hydra Booking <= 1.1.10 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-28972
WP Employee Attendance System <= 3.5 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-49452
PostaPanduri <= 2.1.3 - Unauthenticated SQL Injection
Medium
CVE-2025-49854
Slim SEO <= 4.5.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-24773
WPCRM - CRM for Contact form CF7 & WooCommerce <= 3.2.0 - Unauthenticated SQL Injection
Medium
CVE-2025-6003
WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure
High
CVE-2025-47573
School Management <= 92.0.0 - Unauthenticated SQL Injection
Medium
CVE-2025-48118
Woocommerce Partial Shipment <= 3.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-39479
Smart Notification <= 10.3 - Unauthenticated SQL Injection
High
CVE-2025-48274
WP Job Portal <= 2.3.2 - Unauthenticated SQL Injection
Medium
CVE-2025-48145
Track, Analyze & Optimize by WP Tao <= 1.3 - Reflected Cross-Site Scripting
High
CVE-2025-24767
TicketBAI Facturas para WooCommerce <= 3.19 - Unauthenticated SQL Injection
Medium
CVE-2025-5760
Simple History <= 5.8.1 - Authenticated (Administrator+) Sensitive Information Exposure via Detective Mode
Medium
CVE-2025-4964
WP Online Users Stats <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameter
Medium
CVE-2025-5563
WP-Addpub <= 1.2.8 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-49421
WP Text Expander <= 1.0.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-26590
Complete Google Seo Scan <= 3.5.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-49263
WC Vendors Marketplace <= 2.5.6 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.