High
CVE-2025-32157
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-32184
Ultimate Store Kit Elementor Addons <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32162
Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32139
FooBox Image Lightbox <= 2.7.33 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-32181
Search, Filters & Merchandising for WooCommerce <= 3.0.58 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32125
Silvasoft boekhouden <= 3.0.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-32137
s2Member <= 250419 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-32236
Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic <= 1.9 - Missing Authorization
High
CVE-2025-32154
Catch Dark Mode <= 2.0.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32193
Simple WP Events <= 1.8.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32233
Revive.so – Bulk Rewrite and Republish Blog Posts <= 2.0.3 - Missing Authorization
High
CVE-2025-32156
Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32178
6Storage Rentals <= 2.19.4 - Missing Authorization
Medium
CVE-2025-32266
404 Image Redirection (Replace Broken Images) <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-32278
Table Block by RioVizual <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2025-32263
Sequential Order Numbers for WooCommerce <= 3.6.2 - Cross-Site Request Forgery
Medium
CVE-2025-32258
Simple Website Logo <= 1.1 - Missing Authorization
High
CVE-2025-32155
Beds24 Online Booking <= 2.0.28 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32277
CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization
High
CVE-2025-32159
Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32151
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32160
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-0839
ZoomSounds <= 6.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-32248
SwiftXR (3D/AR/VR) Viewer <= 1.0.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.