High
CVE-2025-3434
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-32491
Rankology SEO – On-site SEO <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Critical
CVE-2025-31380
Paid Videochat Turnkey Site <= 7.3.11 - Authentication Bypass
Medium
CVE-2025-3421
Everest Forms <= 3.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-32532
UXsniff <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-31018
FireDrum Email Marketing <= 1.64 - Reflected Cross-Site Scripting
Critical
CVE-2025-31030
Ray Enterprise Translation <= 1.7.0 - Unauthenticated Local File Inclusion
High
CVE-2025-22279
JetCompareWishlist <= 1.5.9 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-32607
WpBookingly <= 1.3.1 - Unauthenticated PHP Object Injection
High
CVE-2025-2636
InstaWP Connect <= 0.1.0.85 - Unauthenticated Local PHP File Inclusion
Medium
CVE-2025-3422
Everest Forms <= 3.1.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
Critical
CVE-2025-32569
TableOn – WordPress Posts Table Filterable <= 1.0.4.3 - Unauthenticated PHP Object Injection
High
CVE-2025-32568
EmpikPlace for Woocommerce <= 1.4.3 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-26927
AI Hub - Startup & Technology WordPress Theme <= 1.3.7 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-32511
Make Email Customizer for WooCommerce <= 1.0.5 - Reflected Cross-Site Scripting
Critical
CVE-2025-3439
Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-32670
Spark GF Failed Submissions <= 1.3.5 - Reflected Cross-Site Scripting
High
CVE-2025-3417
Embedder 1.3 - 1.3.5 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2025-32499
Logo Showcase Ultimate <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-31015
WordPress SMTP Service, Email Delivery Solved! — MailHawk <= 1.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2024-13381
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-32675
SEO Help <= 6.6.1 - Authenticated (Admin+) Server-Side Request Forgery
Critical
CVE-2025-32672
Ultimate Bootstrap Elements for Elementor <= 1.4.9 - Unauthenticated Local File Inclusion
High
CVE-2025-31014
Material Dashboard <= 1.4.5 - Authenticated (Subscriber+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.