Medium
CVE-2025-25078
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-23984
Dynamic URL SEO <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-25126
ZMSEO <= 1.14.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-22663
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.2.16 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-22669
Awesome Event Booking <= 2.7.5 - Cross-Site Request Forgery
Medium
CVE-2025-25116
Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-43333
Admin and Site Enhancements (ASE) Pro <= 7.6.2.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-25071
Vignette Ads <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22659
Orbit Fox by ThemeIsle <= 2.10.44 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22644
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25095
ReverbNation Widgets <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22646
aThemes Addons for Elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-25103
Indeed API <= 0.5 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-22667
Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets <= 1.8.2 - Missing Authorization
Medium
CVE-2025-24694
CM E-Mail Blacklist – Simple email filtering for safer registration <= 1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22673
EAN for WooCommerce <= 5.3.5 - Missing Authorization
Medium
CVE-2024-11134
Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
Medium
CVE-2025-25077
Easy Chart Builder for WordPress <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22649
WP Project Manager <= 2.6.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22652
Payment Forms for Paystack <= 4.0.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22648
Blog, Posts and Category Filter for Elementor <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13607
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-25110
Event Kikfyre <= 2.1.8 - Missing Authorization
Medium
CVE-2025-25097
External Video For Everybody <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.