Critical
CVE-2025-28947
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-52814
BRW <= 1.8.7 - Unauthenticated Local File Inclusion
High
CVE-2025-24760
Sofass <= 1.3.4 - Unauthenticated Local File Inclusion
High
CVE-2025-52809
National Weather Service Alerts <= 1.3.5 - Unauthenticated Local File Inclusion
Critical
CVE-2025-49885
Drag and Drop Multiple File Upload (Pro) - WooCommerce <= 5.0.6 - Unauthenticated Arbitrary File Upload
High
CVE-2025-60242
Download Counter <= 1.4 - Unauthenticated Arbitrary File Read
Medium
CVE-2025-49983
WPThumb <= 0.10 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-52713
Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-52708
HUSKY <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-52715
Classified Listing <= 4.2.0 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-49926
Kalium <= 3.25 - Unauthenticated Arbitrary Code Execution
Medium
CVE-2025-49984
PowerPress Podcasting <= 11.13.11 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-4102
Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2025-49985
Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-6220
Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
High
CVE-2025-6086
CSV Me <= 2.0 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-4413
Pixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2025-3515
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.9 - Unauthenticated Arbitrary File Upload via Insufficient Blacklist Checks
High
CVE-2025-4200
Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-4187
UserPro - Community and User Profile WordPress Plugin <= 5.1.10 - Unauthenticated Arbitrary File Read
Critical
CVE-2025-6065
Image Resizer On The Fly <= 1.1 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-6070
Restrict File Access <= 1.1.2 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2025-3234
File Manager Pro – Filester <= 1.8.8 - Authenticated (Administrator+) Arbitrary File Upload
High
CVE-2025-47559
MapSVG < 8.7.4 - Authenticated (Contributor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.