Medium
CVE-2025-47544
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-47626
Submission DOM tracking for Contact Form 7 <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47460
TrackShip for WooCommerce <= 1.9.1 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2025-47537
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 5.3.8 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-47657
Productive Commerce <= 1.1.22 - Unauthenticated SQL Injection
Medium
CVE-2025-47587
YaySMTP <= 2.6.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-47633
Awin – Advertiser Tracking for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-47538
Cart tracking for WooCommerce <= 1.0.17 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-47490
Ultimate WP Mail <= 1.3.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-47612
ClickWhale <= 2.4.6 - Missing Authorization
Medium
CVE-2025-47541
Mail Mint <= 1.17.7 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-47643
ELEX Product Feed for WooCommerce <= 3.1.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-47540
weMail <= 1.14.13 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-0853
PGS Core <= 5.8.0 - Unauthenticated SQL Injection
High
CVE-2025-2011
Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection via 's' Parameter
Medium
CVE-2025-4222
Database Toolset <= 1.8.4 - Unauthenticated Sensitive Information Exposure via Backup Files
High
CVE-2025-4204
Ultimate Auction Pro <= 1.5.2 - Unauthenticated SQL Injection via 'auction_id'
Medium
CVE-2024-12023
FULL – Cliente 3.1.5 - 3.1.25 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-13322
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL Injection
High
CVE-2024-13344
Advance Seat Reservation Management for WooCommerce <= 3.3 - Unauthenticated SQL Injection
Medium
CVE-2025-3889
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'
Medium
CVE-2025-2890
tagDiv Opt-In Builder <= 1.7 - Authenticated (Subscriber+) SQL Injection via subscriptionCouponId Parameter
High
CVE-2025-46455
WP HRM LITE <= 1.1 - Unauthenticated SQL Injection
High
CVE-2025-46460
Easy Guide <= 1.0.0 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.