Medium
CVE-2025-25138
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-22645
Real Estate Manager – Property Listing and Agent Management <= 7.3 - CAPTCHA Bypass
High
CVE-2025-25093
Child Themes Helper <= 2.2.7 - Cross-Site Request Forgery to Arbitrary File Deletion
Medium
CVE-2025-22647
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Missing Authorization
Medium
CVE-2024-11132
Eventer <= 3.9.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-22668
Awesome Event Booking <= 2.7.2 - Missing Authorization
Medium
CVE-2025-25085
WP SimpleWeather <= 0.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22680
Ad Inserter Pro <= 2.7.39 - Reflected Cross-Site Scripting
Medium
CVE-2024-11133
Eventer <= 3.9.9.5 - Missing Authorization to Unauthenticated Event Ticket Download
Medium
CVE-2024-12308
Logo Slider <= 4.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13605
Form Maker by 10Web <= 1.15.32 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-25150
uListing <= 2.1.6 - Unauthenticated SQL Injection
Medium
CVE-2024-12597
HT Mega <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css
Medium
CVE-2025-25153
Simple Auto Tag <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22641
FM Notification Bar <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25166
InLocation <= 1.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22670
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-25081
Embed RSS <= 3.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Medium
CVE-2025-25154
Custom Comment Notifications <= 1.0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25156
Quote Comments <= 3.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25152
Smart DoFollow <= 1.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-25092
All push notification for WP <= 1.5.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25105
Pop Up <= 0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25124
Status Updater <= 1.9.2 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.