High
CVE-2025-59564
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-60071
Riode | Multi-Purpose WooCommerce <= 1.6.23 - Unauthenticated Local File Inclusion
Critical
CVE-2025-60070
Molla <= 1.5.13 - Unauthenticated Remote Code Execution
High
CVE-2025-64223
PenNews < 6.7.3 - Unauthenticated Local File Inclusion
High
CVE-2025-60069
MinimogWP <= 3.9.6 - Unauthenticated Local File Inclusion
Medium
CVE-2025-6722
BitFire <= 4.5 - Unauthenticated Information Exposure
Medium
CVE-2025-7694
Woffice Core <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion
High
CVE-2025-49386
Preserve Code Formatting <= 4.0.1 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-7443
BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-48158
BuddyPress XProfile Custom Image Field <= 3.0.1 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-52732
Google Map Targeting <= 1.1.6 - Authenticated (Subscriber+) Local File Inclusion
Critical
CVE-2025-48148
StoreKeeper for WooCommerce <= 14.4.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-28987
PressForward <= 5.9.1 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-49887
Product XML Feed Manager for WooCommerce <= 2.9.3 - Authenticated (Contributor+) Remote Code Execution
Medium
CVE-2025-54748
MapSVG < 8.6.12 - Authenticated (Contributor+) Arbitrary File Download
High
CVE-2025-7847
AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2025-58958
SmilePure < 1.8.5 - Unauthenticated Local File Inclusion
High
CVE-2025-48149
Cook&Meal <= 1.2.3 - Unauthenticated Local File Inclusion
High
CVE-2025-8213
NinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File Deletion
High
CVE-2025-54052
Realtyna Organic IDX plugin <= 5.0.0 - Unauthenticated Local File Inclusion
High
CVE-2025-25174
BeeTeam368 Extensions <= 1.9.4 - Unauthenticated Local File Inclusion
High
CVE-2025-54034
Newsletters <= 4.10 - Unauthenticated Local File Inclusion
High
CVE-2025-60072
Anchor smooth scroll <= 1.0.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-60187
Atarim <= 4.2.1 - Unauthenticated Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.