Medium
CVE-2025-47684
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-47473
PW WooCommerce Bulk Edit <= 2.134 - Cross-Site Request Forgery
Medium
CVE-2025-47676
User Login History <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47486
Gutenberg & Elementor Templates Importer For Responsive <= 3.1.9 - Missing Authorization
High
CVE-2025-47439
Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47633
Awin – Advertiser Tracking for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
High
CVE-2024-13793
Wolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore
Medium
CVE-2025-47632
Awesome Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47667
LiveAgent <= 4.4.7 - Cross-Site Request Forgery
Medium
CVE-2025-47644
Integrations of Zoho CRM with Elementor form <= 1.0.7 - Open Redirect
Medium
CVE-2025-47499
Simple Blog Stats <= 20250416 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47517
Accept Donations with PayPal <= 1.4.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-47639
Supertext Translation and Proofreading <= 4.25 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-47549
BEAF <= 4.6.10 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-47538
Cart tracking for WooCommerce <= 1.0.17 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-47686
DELUCKS SEO <= 2.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47551
Wiki Embed <= 1.4.6 - Cross-Site Request Forgery
Medium
CVE-2025-47675
Woobox <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47490
Ultimate WP Mail <= 1.3.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-47597
WP Podcasts Manager <= 1.3 - Cross-Site Request Forgery
Medium
CVE-2025-47648
Pays – WooCommerce Payment Gateway <= 2.6 - Cross-Site Request Forgery
Medium
CVE-2025-47612
ClickWhale <= 2.4.6 - Missing Authorization
Medium
CVE-2025-47615
Amazon Product in a Post <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-2806
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'data'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.