Medium
CVE-2025-32214
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-32240
Site Notify <= 1.0 - Missing Authorization
High
CVE-2025-31524
WP User Profiles <= 2.6.2 - Authenticated (Subscriber+) Privilege Escalation
High
CVE-2025-32202
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2025-2883
Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure
High
CVE-2025-2807
Motors – Car Dealership & Classified Listings Plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
High
CVE-2025-3064
WPFront User Role Editor <= 4.2.1 - Cross-Site Request Forgery to Privilege Escalation via whitelist_options Function
Medium
CVE-2025-2882
GreenPay(tm) by Green.Money 3.0.0 - 3.0.9 - Unauthenticated Information Exposure
Medium
CVE-2024-13820
Melhor Envio <= 2.15.11 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash
Critical
CVE-2025-2004
Simple WP Events <= 1.8.17 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-32244
SEO Help <= 6.8.5 - Missing Authorization
Medium
CVE-2025-32212
Specia Companion <= 4.8 - Missing Authorization
Medium
CVE-2025-32119
CardGate Payments for WooCommerce <= 3.2.1 - Authenticated (Administrator+) SQL Injection
Low
CVE-2025-32205
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Path Traversal
Medium
CVE-2025-3428
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
Medium
CVE-2025-3436
coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32128
Nearby Locations <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-3437
Motors – Car Dealership & Classified Listings Plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up
Medium
CVE-2025-32221
EazyDocs <= 2.7.1 - Missing Authorization
Medium
CVE-2025-32275
Survey Maker <= 5.1.6.3 - Unauthenticated Authorization Bypass
Medium
CVE-2025-32230
Tutor LMS <= 3.4.0 - Authenticated (Subscriber+) HTML Injection
Medium
CVE-2025-32213
Flo Forms <= 1.0.43 - Missing Authorization
Medium
CVE-2019-25223
Team Circle Image Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-32216
Spider Elements – Addons for Elementor <= 1.6.3 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.