Medium
CVE-2025-32495
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2025-32672
Ultimate Bootstrap Elements for Elementor <= 1.4.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32570
ChillPay WooCommerce <= 2.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31377
Woo Product Feed For Marketing Channels <= 1.9.0 - Missing Authorization
Medium
CVE-2025-32586
ABA PayWay Payment Gateway for WooCommerce <= 2.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-31393
Social Bookmarking RELOADED <= 3.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-30964
Photography <= 7.5.2 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-32618
Wishlist <= 1.0.44 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32498
VKontakte Cross-Post <= 0.3.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-31014
Material Dashboard <= 1.4.5 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-32584
Chat2 <= 4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32621
WP Map Route Planner <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32485
WP Performance Pack <= 2.5.4 - Cross-Site Request Forgery
Medium
CVE-2025-31028
WP Hide Categories <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-3471
SureForms – Drag and Drop Form Builder for WordPress <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Settings Update
Medium
CVE-2025-32617
Multiple Location Google Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32623
PlainInventory <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32642
Vite Coupon <= 1.0.9 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2025-31390
Social Crowd <= 0.9.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32645
Custom Posts Order <= 4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31032
Pagopar – WooCommerce Gateway <= 2.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32542
Eazy Plugin Manager <= 4.3.0 - Missing Authorization
Medium
CVE-2025-32537
Lock Your Updates <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31035
WP Editor.md – The Perfect WordPress Markdown Editor <= 10.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.