Medium
CVE-2025-39574
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
High
CVE-2025-39584
Eventin <= 4.0.25 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-39575
WPCasa <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39576
WPAdverts <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-39587
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection
Medium
CVE-2025-39578
Responsive Blocks <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39520
Checkout Files Upload for WooCommerce <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39573
WP Posts Carousel <= 1.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3453
Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products <= 2.7.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-39530
Site Search 360 <= 2.1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-39579
Membership For WooCommerce <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39515
Attendance Manager <= 0.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-39558
CRM Perks <= 1.1.7 - Reflected Cross-Site Scripting
High
CVE-2025-39533
Starfish Review Generation & Marketing <= 3.1.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-39559
Bring Fraktguiden for WooCommerce <= 1.11.4 - Missing Authorization
Medium
CVE-2025-39552
Zephyr Project Manager <= 3.3.200 - Missing Authorization
Medium
CVE-2025-39577
PropertyHive <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3104
WP Staging Pro <= 6.1.2 - Unauthenticated Information Exposure via getOutdatedPluginsRequest Function
Medium
CVE-2025-3077
Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3247
Contact Form 7 <= 6.0.5 - Order Replay Vulnerability
Medium
CVE-2024-13452
Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
Medium
CVE-2025-2314
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-26944
JetPopup <= 2.0.11 - Missing Authorization
Medium
CVE-2025-30960
FS Poster <= 6.5.8 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.