High
CVE-2025-46539
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-39370
iCafe Library <= 1.8.3 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-43833
Absolute Links <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-46463
Mailing Group Listserv <= 3.0.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-3923
Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-46513
All in One Time Clock Lite <= 1.3.325 - Cross-Site Request Forgery
Medium
CVE-2025-3280
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-46242
Watu Quiz <= 3.4.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-46252
Message Filter for Contact Form 7 <= 1.6.3.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-46248
Frontend Dashboard <= 2.2.5 - Unauthenticated SQL Injection
High
CVE-2025-39386
Hospital Management System <= 47.0(20-11-2023) - Unauthenticated SQL Injection
Medium
CVE-2025-32924
Revy <= 2.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-39377
Appsero Helper <= 1.3.4 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-39389
AnalyticsWP <= 2.1.2 - Unauthenticated SQL Injection
Medium
CVE-2025-39355
FAT Services Booking <= 5.6 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-11299
Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2025-39357
Hospital Management System <= 47.0(20-11-2023) - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-2010
JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin <= 2.3.9 - Unauthenticated SQL Injection
Medium
CVE-2025-39394
AnalyticsWP <= 2.1.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-39569
Taskbuilder <= 4.0.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-39395
WPAMS <= 44.0 (17-08-2023) - Unauthenticated SQL Injection
High
CVE-2025-39595
Quentn WP <= 1.2.8 - Unauthenticated SQL Injection
Medium
CVE-2025-39586
ProfileGrid <= 5.9.4.8 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-39439
wpLike2Get <= 1.2.9 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.