Medium
CVE-2025-48246
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2025-48282
Majestic Support <= 1.1.0 - Missing Authorization
Medium
CVE-2025-48277
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48263
MultiVendorX <= 4.2.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-32292
Jarvis – Night Club, Concert, Festival WordPress <= 1.8.11 - Unauthenticated PHP Object Injection
Medium
CVE-2025-48344
Rootspersona <= 3.7.5 - Cross-Site Request Forgery
Medium
CVE-2025-48265
Year Make Model Search for WooCommerce <= 1.0.11 - Cross-Site Request Forgery
Medium
CVE-2025-48276
Visual Composer Website Builder <= 45.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-39489
CouponXL <= 4.5.0 - Unauthenticated Privilege Escalation
Medium
CVE-2025-39368
Rootspersona <= 3.7.5 - Missing Authorization
Medium
CVE-2024-5878
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library
Medium
CVE-2025-48239
Product Notes Tab & Private Admin Notes for WooCommerce <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48269
WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48253
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48240
Cost of Goods for WooCommerce <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48256
Import Social Events <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31054
Bloggie <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-48238
AWcode Toolkit <= 1.0.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-48341
Form Maker by 10Web <= 1.15.33 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48340
User Profile Meta Manager <= 1.02 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2025-48247
Shortlinks by Pretty Links <= 3.6.15 - Missing Authorization
Medium
CVE-2025-48232
Xpro Addons For Beaver Builder – Lite <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48280
AutomatorWP <= 5.2.1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-48266
Active Products Tables for WooCommerce <= 1.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.