Medium
CVE-2025-22640
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-25123
Easy Related Posts <= 2.0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-25101
Munk Sites <= 1.0.7 - Cross-Site Request Forgery to Arbitrary Plugin Installation
Critical
CVE-2025-25122
WizShop <= 3.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-25162
Sports Rankings and Lists <= 1.0.2 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-25090
Dreamstime Stock Photos <= 4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-25163
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-25087
seekXL Snapr <= 2.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-25115
Like dislike plus counter | Like Dislike Buttons <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-25070
Album Reviewer <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25113
Implied Cookie Consent <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-25137
Social Links <= 1.0.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-25130
Delete Comments By Status <= 2.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-25132
Visitor Details <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-25142
WP Less Compiler <= 1.3.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25169
Authors Autocomplete Meta Box <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2025-25165
Staff Directory Plugin: Company Directory <= 4.3 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25114
User Role <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-25167
BookPress – For Book Authors <= 1.2.7 - Missing Authorization
Medium
CVE-2025-25131
RJ Quickcharts <= 0.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-25083
EP4 More Embeds <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25118
Top Bar – PopUps – by WPOptin <= 2.0.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25084
UniTimetable <= 1.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-25112
Social Links <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.