Medium
CVE-2025-4571
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Medium
CVE-2025-5490
Football Pool <= 2.12.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-5524
OceanWP <= 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Select HTML Tag
Medium
CVE-2025-49015
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
Medium
CVE-2025-4367
Download Manager <= 3.3.18 - Authenticated (Author+) Stored Cross-site Scripting via wpdm_user_dashboard Shortcode
Medium
CVE-2025-4479
ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
Medium
CVE-2025-50183
OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer
Medium
CVE-2025-6201
Pixel Manager for WooCommerce (PRO) <= 1.49.0 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Medium
CVE-2025-53217
AIO WP Builder <= 2.0.2 - Missing Authorization
Medium
CVE-2025-53233
Storyform <= 0.6.14 - Reflected Cross-Site Scripting
Medium
CVE-2025-47654
FormLift for Infusionsoft Web Forms <= 7.5.20 - Reflected Cross-Site Scripting
Medium
CVE-2025-49312
Echo RSS Feed Post Generator <= 5.4.8.1 - Reflected Cross-Site Scripting
High
CVE-2025-53231
Easy Taxonomy Images <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-4965
WPBakery Page Builder <= 8.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via Grid Builder
Medium
CVE-2025-31428
HYDRO <= 2.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-39478
Smart Notification <= 10.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-23999
Breeze <= 2.2.13 - Missing Authorization
Medium
CVE-2025-30972
Woocommerce Line Notify <= 1.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-25173
FastBook <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-53235
Easy Social <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-47574
School Management <= 92.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23973
SpecFit-Virtual Try On Woocommerce <= 10.0.21 - Reflected Cross-Site Scripting
High
CVE-2025-5071
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP
Medium
CVE-2025-49423
Bulk YouTube Post Creator <= 1.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.