Medium
CVE-2025-6729
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-5322
VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-5961
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-23968
Graphina <= 3.1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49302
Easy Stripe <= 1.1 - Unauthenticated Remote Code Execution
Medium
CVE-2025-49418
Allmart <= 1.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2025-2932
JKDEVKIT <= 1.9.4 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-60241
Premmerce <= 1.3.19 - Unauthenticated Local File Inclusion
High
CVE-2025-4946
Vikinger <= 1.9.32 - Authenticated (Subscriber+) Arbitrary File Deletion via vikinger_delete_activity_media_ajax Function
High
CVE-2025-5014
Home Villas | Real Estate WordPress Theme <= 2.8 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2025-5817
Amazon Products to WooCommerce <= 1.2.7 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2025-4689
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
High
CVE-2025-4380
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
Critical
CVE-2025-5746
Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 1.7.1 and 5.0 - 5.0.5 - Unauthenticated Arbitrary File Upload
High
CVE-2025-53198
Houzez <= 4.0.4 - Unauthenticated Local File Inclusion
High
CVE-2025-53204
Event List <= 1.9.2 - Unauthenticated Local File Inclusion
High
CVE-2025-52805
Leyka <= 3.31.9 - Unauthenticated Local File Inclusion
High
CVE-2025-5804
Case Theme User < 1.0.4 - Unauthenticated Local File Inclusion
High
CVE-2025-53207
WP Travel Gutenberg Blocks <= 3.9.0 - Unauthenticated Local File Inclusion
High
CVE-2025-52723
Networker <= 1.2.0 - Unauthenticated Local File Inclusion
High
CVE-2025-52807
Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Unauthenticated Local File Inclusion
High
CVE-2025-49070
Elessi < 6.4.1 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-4414
CMSMasters Content Composer < 2.5.7 - Unauthenticated Local File Inclusion
Critical
CVE-2025-52718
Alone <= 7.8.2 - Unauthenticated Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.