Critical
CVE-2025-32569
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
High
CVE-2025-32568
EmpikPlace for Woocommerce <= 1.4.3 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-26927
AI Hub - Startup & Technology WordPress Theme <= 1.3.7 - Unauthenticated Arbitrary File Upload
Critical
CVE-2025-3439
Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10894
Payment Forms for Paystack <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-3102
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
Medium
CVE-2025-32687
Review Stars Count For WooCommerce <= 2.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-32144
Job Board Manager <= 2.1.60 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-32143
Accordion <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-32145
WpEvently <= 4.3.6 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-32168
Gutenify <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-13645
TagDiv Composer <= 5.3 - Unauthenticated Arbitrary PHP Object Instantiation
High
CVE-2025-30889
Testimonial Slider <= 2.0.13 - Authenticated (Contributor+) PHP Object Injection
Critical
CVE-2025-30985
GNUCommerce <= 1.5.4 - Unauthenticated PHP Object Injection
High
CVE-2025-30892
WpTravelly <= 1.8.7 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-31853
Smartarget Popup <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12189
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-31612
CBX Poll <= 1.2.7 - Unauthenticated PHP Object Injection
Critical
CVE-2025-31087
Multiple Shipping And Billing Address For Woocommerce <= 1.5 - Unauthenticated PHP Object Injection
Critical
CVE-2025-31084
Sunshine Photo Cart <= 3.4.10 - Unauthenticated PHP Object Injection
High
CVE-2025-31074
MDJM Event Management <= 1.7.5.2 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-30618
Rapyd Payment Extension for WooCommerce <= 1.2.0 - Unauthenticated PHP Object Injection
Medium
CVE-2025-30861
Five Star Restaurant Reservations <= 2.6.29 - Missing Authorization
High
CVE-2025-2485
Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated PHP Object Injection via PHAR to Arbitrary File Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.