Medium
CVE-2025-47542
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-47451
Product Quantity Dropdown For Woocommerce <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2025-47459
WP Fundraising Donation and Crowdfunding Platform <= 1.7.3 - Cross-Site Request Forgery
Medium
CVE-2025-47606
Simple Giveaways <= 2.48.2 - Cross-Site Request Forgery
Medium
CVE-2025-47501
Content Control <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47449
Meow Gallery <= 5.2.7 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-47546
WP Compress <= 6.30.30 - Cross-Site Request Forgery
Medium
CVE-2025-47518
Contact Form 7 – PayPal & Stripe Add-on <= 2.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-47498
Hotel Booking <= 3.6 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-47550
Instantio <= 3.3.16 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2025-47532
CoinPayments.net Payment Gateway for WooCommerce <= 1.0.17 - Unauthenticated PHP Object Injection
Medium
CVE-2025-47497
Logo Showcase <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-47691
Ultimate Member <= 2.10.3 - Authenticated (Administrator+) Arbitrary Function Call
Medium
CVE-2025-47447
Cool Author Box <= 3.0.0 - Cross-Site Request Forgery
Medium
CVE-2025-47495
Blockspare <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47516
Time Clock <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47669
CBX Map for Google Map & OpenStreetMap <= 1.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47620
Martins Free Monetized Ad Exchange Network <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-47668
CookieCode <= 2.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-47629
WP-CRM System <= 3.4.5 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2025-47508
GamiPress <= 7.3.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47604
Inline Related Posts <= 3.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47647
Sidebar Manager Light <= 1.18 - Cross-Site Request Forgery
High
CVE-2025-47683
WP Maintenance <= 6.1.9.7 - Authenticated (Administrator+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.