Medium
CVE-2025-31044
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-28982
WP Pipes <= 1.4.3 - Unauthenticated SQL Injection
Medium
CVE-2025-49034
Funnel Builder by FunnelKit <= 3.10.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-28953
smart SEO <= 4.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-52819
Pakke Envíos <= 1.0.2 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-30936
Torod <= 1.9 - Unauthenticated SQL Injection
Medium
CVE-2025-30628
Amazon Affiliates Addon for WPBakery Page Builder (formerly Visual Composer) <= 1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-28969
Gallery Widget <= 1.2.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-30979
Pixelating image slideshow gallery <= 8.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-28967
Contact Us page - Contact people LITE <= 3.7.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-30969
iFrame Images Gallery <= 9.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-30947
Cool fade popup <= 10.1 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-6782
GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()
High
CVE-2025-6783
GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()
High
CVE-2025-49870
Paid Member Subscriptions <= 2.15.1 - Unauthenticated SQL Injection
Medium
CVE-2025-24780
Printcart Web to Print Product Designer for WooCommerce <= 2.4.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-52830
bSecure – Your Universal Checkout <= 1.7.9 - Unauthenticated SQL Injection
Medium
CVE-2025-6739
WPQuiz <= 0.4.2 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13451
Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-5339
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'
High
CVE-2025-6437
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
High
CVE-2025-4381
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection
Medium
CVE-2026-15289
Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'
High
CVE-2025-52832
NGG Smart Image Search <= 3.4.1 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.