High
CVE-2025-31579
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-31531
History Log by click5 <= 1.0.13 - Unauthenticated SQL Injection
Medium
CVE-2025-31526
Behance Portfolio Manager <= 1.7.5 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-31551
Salesmate Add-On for Gravity Forms <= 2.0.3 - Unauthenticated SQL Injection
Medium
CVE-2025-31564
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.2.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-31534
Shopper <= 3.2.5 - Unauthenticated SQL Injection
Medium
CVE-2025-31024
RJ Quickcharts <= 0.6.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-13567
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
High
CVE-2025-30807
Next-Cart Store to WooCommerce Migration <= 3.9.4 - Unauthenticated SQL Injection
High
CVE-2025-30774
Quiz Maker <= 6.6.8.7 - Unauthenticated SQL Injection
Medium
CVE-2025-31099
Slider by BestWebSoft <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-31448
Simple Trackback Disabler <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-31466
Duplicate Page and Post <= 1.0 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-2074
Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
Medium
CVE-2025-30897
Analytify <= 5.5.1 - Missing Authorization to Authenticated (Subscriber+) Minor Settings Update
Medium
CVE-2025-30909
Conversios.io <= 7.2.3 - Missing Authorization
Medium
CVE-2025-30791
Cart tracking for WooCommerce <= 1.0.16 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-30819
Simple Giveaways <= 2.48.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-30589
Flickr set slideshows <= 0.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-30843
bizcalendar-web <= 1.1.0.34 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-30876
Ads by WPQuads <= 2.0.87.1 - Unauthenticated SQL Injection
Medium
CVE-2025-30810
Lead Form Data Collection to CRM <= 3.0.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-30775
WPGuppy <= 1.1.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-30921
Newsletters <= 4.9.9.7 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.