High
CVE-2025-60059
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-60048
Tripster <= 1.0.10 - Unauthenticated Local File Inclusion
High
CVE-2025-49374
Captcha.eu <= 1.0.61 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-60056
Winger <= 1.0.16 - Unauthenticated Local File Inclusion
High
CVE-2025-60060
Pubzinne <= 1.0.12 - Unauthenticated Local File Inclusion
High
CVE-2025-58943
Agricola <= 1.1.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58941
Fabric <= 1.5.0 - Unauthenticated Local File Inclusion
High
CVE-2025-54750
Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion
High
CVE-2025-60055
Fabrica <= 1.8.1 - Unauthenticated Local File Inclusion
High
CVE-2025-60051
Rare Radio <= 1.0.15.1 - Unauthenticated Local File Inclusion
High
CVE-2025-8889
Compress Then Upload <= 1.0.4 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2025-60061
Kicker <= 2.2.0 - Unauthenticated Local File Inclusion
High
CVE-2025-58940
Basil <= 1.3.12 - Unauthenticated Local File Inclusion
High
CVE-2025-60049
Soleil <= 1.17 - Unauthenticated Local File Inclusion
Medium
CVE-2025-8357
Media Library Assistant <= 3.27 - Authenticated (Author+) Limited File Deletion
High
CVE-2025-8085
Ditty <= 3.1.57 - Unauthenticated Server-Side Request Forgery
High
CVE-2025-64230
Filr <= 1.2.10 - Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2025-49895
ServerBuddy by PluginBuddy.com <= 1.0.5 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2025-7499
BetterDocs <= 4.1.1 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
High
CVE-2025-6079
School Management System <= 93.2.0 - Authenticated (Student+) Arbitrary File Upload
High
CVE-2025-3671
WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update
Critical
CVE-2025-7441
StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-8393
Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion
High
CVE-2025-8142
Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.