Medium
CVE-2025-5731
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Low
CVE-2025-6736
JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing certain components
Low
CVE-2025-6735
JuzaWeb CMS is vulnerable to Incorrect Privilege Assignment when installing Import Page component
Medium
CVE-2025-53318
WP DB Booster <= 1.0.1 - Missing Authorization
Medium
CVE-2025-53195
JetEngine <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53262
Writesonic <= 1.0.5 - Cross-Site Request Forgery
Medium
CVE-2025-53323
Pre-Publish Post Checklist <= 3.1 - Missing Authorization
Medium
CVE-2025-53322
Accept Authorize.NET Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure
Medium
CVE-2025-53275
Leyka <= 3.31.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53287
Quick Favicon <= 0.22.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53285
Add & Replace Affiliate Links for Amazon <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-53271
Additional Order Filters for WooCommerce <= 1.22 - Cross-Site Request Forgery
Medium
CVE-2025-53264
ONet Regenerate Thumbnails <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2025-53258
Hover Effects <= 2.1.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-53266
Cron Logger <= 1.3.3 - Missing Authorization
Medium
CVE-2025-53291
Spreadconnect <= 2.1.6 - Missing Authorization
Medium
CVE-2025-53313
Twitch TV Embed Suite <= 2.1.0 - Cross-Site Request Forgery
Medium
CVE-2025-53278
WP AdCenter <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53314
WP Optimizer <= 2.3.6 - Cross-Site Request Forgery
Medium
CVE-2025-53272
Image Cleanup <= 1.9.2 - Cross-Site Request Forgery
Medium
CVE-2025-53288
PlatiOnline Payments <= 7.0.0 - Missing Authorization
Medium
CVE-2025-53202
Responsive Blocks <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53290
WP Visual Sitemap <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-53309
Accept Stripe Payments Using Contact Form 7 <= 3.0 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.