Medium
CVE-2025-47661
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-47485
Cozy Blocks <= 2.1.22 - Missing Authorization
Medium
CVE-2025-47614
LessButtons Social Sharing and Statistics <= 1.6.1 - Cross-Site Request Forgery
Medium
CVE-2025-47665
N360 | Splash Screen <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47622
Email Notification on Login <= 1.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47472
Music Player for WooCommerce <= 1.5.1 - Missing Authorization
Medium
CVE-2025-47488
Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47617
WP Front User Submit / Front Editor <= 4.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-47539
Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation
High
CVE-2025-47533
Graphina <= 3.0.4 - Cross-Site Request Forgery to Local File Inclusion
High
CVE-2025-47531
XT Event Widget for Social Events <= 1.1.7 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47681
Web Accessibility with Max Access <= 2.0.9 - Cross-Site Request Forgery
Medium
CVE-2025-47507
Better Search <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47526
GS Variation Swatches for WooCommerce <= 3.0.4 - Missing Authorization
Medium
CVE-2025-47625
DoFollow Case by Case <= 3.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47524
Quran multilanguage Text & Audio <= 2.3.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47506
Contextual Related Posts <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47457
LocateAndFilter <= 1.6.16 - Missing Authorization
Medium
CVE-2025-47589
Ebook Store <= 5.8009 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47505
Product Time Countdown for WooCommerce <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47685
Contribuinte Checkout <= 2.0.03 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Low
CVE-2025-47465
Blocksy <= 2.0.97 - Missing Authorization
Medium
CVE-2025-47489
Beds24 Online Booking <= 2.0.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47470
GPT3 AI Content Writer <= 1.9.14 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.