Critical
CVE-2025-6222
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-7438
MasterStudy LMS – Online Courses, eLearning PRO Plus <= 4.7.9 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2025-7712
Madara - Core <= 2.2.3 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-49264
Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Unauthenticated Local File Inclusion
High
CVE-2025-53567
Ghost Kit <= 3.4.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-5396
Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution
Critical
CVE-2025-48157
Formality <= 1.5.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48294
FG Drupal to WordPress <= 3.90.0 - Authenticated (Admin+) Server-Side Request Forgery
High
CVE-2025-53565
Widget for Google Reviews <= 1.0.15 - Unauthenticated Local File Inclusion
Medium
CVE-2025-54015
HT Contact Form 7 <= 2.0.0 - Authenticated (Administrator+) Local File Inclusion
Critical
CVE-2025-60206
Alone <= 7.8.3 - Unauthenticated Remote Code Execution
High
CVE-2025-30635
IDonatePro <= 2.1.8 - Unauthenticated Local File Inclusion
High
CVE-2025-7359
Counter live visitors for WooCommerce <= 1.3.6 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block
High
CVE-2025-60203
Store Exporter <= 2.7.6 - Unauthenticated Local File Inclusion
High
CVE-2025-60204
WooCommerce Store Toolkit <= 2.4.3 - Unauthenticated Local File Inclusion
Critical
CVE-2025-7340
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-7360
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move
Critical
CVE-2025-7341
HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-10134
Goza - Nonprofit Charity WordPress Theme <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-5393
Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-60207
Custom User Registration Fields for WooCommerce <= 2.1.2 - Unauthenticated Arbitrary File Upload
High
CVE-2025-7667
Restrict File Access <= 1.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2025-53194
JetEngine <= 3.7.1 - Authenticated (Contributor+) Server-Side Template Injection to Remote Code Execution
High
CVE-2025-60240
AnyComment <= 0.3.6 - Unauthenticated Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.