Medium
CVE-2025-30932
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,741
Medium
CVE-2025-30958
onOffice for WP-Websites <= 5.7 - Missing Authorization
Medium
CVE-2025-49283
Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross-Site Request Forgery
Medium
CVE-2025-49272
Trinity Audio <= 5.20.0 - Missing Authorization
Medium
CVE-2023-25997
Sola Support Ticket <= 3.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Medium
CVE-2025-30986
Elite Video Player <= 10.0.5 - Cross-Site Request Forgery
Medium
CVE-2025-30928
WP Biographia <= 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49427
Abbie Expander <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30980
Simple Keyword to Link <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2025-49443
Bacon Ipsum <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49322
404 Page by SeedProd <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30977
WP Live Chat + Chatbots Plugin for WordPress – Chaport <= 1.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-49446
Admin Notes <= 1.1 - Cross-Site Request Forgery
Medium
CVE-2025-49238
Everest Backup <= 2.3.3 - Cross-Site Request Forgery
Low
CVE-2025-49419
Foxit eSign for WordPress <= 2.0.3 - Authenticated (Admin+) Information Exposure
Medium
CVE-2025-30638
Powie's Uptime Robot <= 0.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30945
Taskbuilder <= 4.0.7 - Missing Authorization
Medium
CVE-2025-1778
Art Theme <= 3.12.2.3 - Missing Authorization to Authenticated (Subscriber+) Theme Option Delete
Medium
CVE-2025-29013
Custom Category/Post Type Post order <= 1.6.0 - Missing Authorization
Medium
CVE-2025-29011
YouTube Simple Gallery <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49269
Market Exporter <= 2.0.22 - Cross-Site Request Forgery
Medium
CVE-2025-28981
WP Mail Options <= 0.2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-49311
The Events Calendar Countdown Addon <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-49285
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 3.8.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.