Medium
CVE-2025-32183
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-22282
ez Form Calculator - WordPress plugin <= 2.14.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-32169
Showeblogin Social <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32254
WPBookit <= 1.0.7 - Missing Authorization
Medium
CVE-2025-32199
Contact Form Builder by vcita <= 4.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32138
Easy Google Maps <= 1.11.18 - Authenticated (Author+) XML Entity Injection
Medium
CVE-2025-32164
m1.DownloadList <= 0.23 - Authenticated (Contributor+) Sensitive Information Disclosure
Medium
CVE-2025-32172
YaMaps for WordPress <= 0.6.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32186
Turbo Addons for Elementor <= 1.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32234
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
High
CVE-2025-32141
MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32267
Post to Social Media – WordPress to Hootsuite <= 1.5.9 - Cross-Site Request Forgery
Medium
CVE-2025-32264
UltraAddons <= 2.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-32204
Split Test For Elementor <= 1.8.3 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-32269
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.3 - Cross-Site Request Forgery
Medium
CVE-2025-32226
Display product variations dropdown on shop page <= 1.1.3 - Missing Authorization
Medium
CVE-2025-32167
SurveyJS <= 1.12.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32270
Broadstreet <= 1.51.1 - Cross-Site Request Forgery
Medium
CVE-2025-32175
VK Filter Search <= 2.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1233
Lafka Plugin <= 7.1.0 - Missing Authorization to Authenticated (Subscriber+) Theme Option Update
Medium
CVE-2025-32198
Brizy <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-2525
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-32229
Variable Inspector < 2.7.1 - Missing Authorization
Medium
CVE-2025-32235
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.9.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.