High
CVE-2025-57925
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-53450
Easy Pricing Table WP <= 1.1.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-10380
Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI
Medium
CVE-2025-53457
SEO Backlink Monitor <= 1.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Critical
CVE-2025-10412
Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni_cpo_upload_file'
High
CVE-2025-59588
Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-10147
Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-57943
Skimlinks Affiliate Marketing Tool <= 1.3 - Authenticated (Administrator+) Server-Side Request Forgery
High
CVE-2025-10647
Embed PDF for WPForms <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-58995
Leblix <= 2.4 - Unauthenticated Local File Inclusion
Critical
CVE-2025-58963
Medcity < 1.1.9 - Unauthenticated Arbitrary File Upload
High
CVE-2025-10058
WP Import – Ultimate CSV XML Importer for WordPress <= 7.27 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-10162
Admin and Customer Messages After Order for WooCommerce: OrderConvo <= 13.5 - Unauthenticated Arbitrary File Read
Medium
CVE-2025-10050
Developer Loggers for Simple History <= 0.5 - Authenticated (Admin+) Local File Inclusion
High
CVE-2025-9216
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-10042
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
High
CVE-2025-10143
Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-9215
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2025-58967
Businext < 2.4.4 - Unauthenticated Local File Inclusion
High
CVE-2025-10176
The Hack Repair Guy's Plugin Archiver <= 2.0.4 - Authenticated (Administrator+) Arbitrary File Deletion
High
CVE-2025-64377
ListingPro < 2.9.10 - Unauthenticated Local File Inclusion
High
CVE-2025-8575
LWS Cleaner <= 2.4.1.3 - Authenticated (Administrator+) Arbitrary File Deletion via 'lws_cl_delete_file'
High
CVE-2025-8422
Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
High
CVE-2025-9874
Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.