Critical
CVE-2025-31040
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-31002
Squeeze <= 1.6 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2025-32663
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32656
Testimonial Slider And Showcase Pro <= 2.3.15 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32519
IDonate <= 2.1.9 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32633
Database Toolset <= 1.8.4 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-31009
IndieBlocks <= 0.13.1 - Unauthenticated Server-Side Request Forgery
Critical
CVE-2025-32589
Flexi – Guest Submit <= 4.28 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32629
WP-BusinessDirectory <= 3.1.2 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-32487
Waymark <= 1.5.2 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-32671
Print Science Designer <= 1.3.155 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-32614
EventON <= 2.4 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32627
JS Job Manager <= 2.0.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32587
WooCommerce Pickupp <= 2.4.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32654
Motors <= 1.4.71 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32668
Real Estate Manager <= 7.3 - Unauthenticated Local File Inclusion
High
CVE-2025-32496
Ultra Demo Importer <= 1.0.5 - Cross-Site Request Forgery to Remote Code Execution
Critical
CVE-2025-32631
Oxygen MyData for WooCommerce <= 1.0.64 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-32585
Shop Products Filter <= 1.2 - Authenticated (Subscriber+) Local File Inclusion
High
CVE-2025-32692
WP Subscription Forms <= 1.2.4 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-32577
Build App Online <= 1.0.23 - Unauthenticated Local File Inclusion
High
CVE-2025-32140
WP Remote Thumbnail <= 1.3.2 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2025-32206
Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload
High
CVE-2025-32202
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.