Medium
CVE-2025-32561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-32513
Nomupay Payment Processing Gateway <= 7.1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-3292
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update
Medium
CVE-2025-2841
Cart66 Cloud <= 2.3.7 - Unauthenticated Information Exposure
Medium
CVE-2025-2881
Developer Toolbar <= 1.0.3 - Unauthenticated Information Exposure
Medium
CVE-2025-26746
Advanced Custom Fields: Link Picker Field <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-26906
WP Delete User Accounts <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13338
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.1 - Cross-Site Request Forgery to Clear Cache
Medium
CVE-2025-26749
Additional Custom Product Tabs for WooCommerce <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-3276
SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13337
Webcraftic Clearfy – WordPress optimization plugin <= 2.3.2 - Cross-Site Request Forgery to Plugin Settings Update via 'setup-wbcr_clearfy'
Medium
CVE-2025-26744
JetBlog <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-2269
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.34 Reflected Cross-Site Scripting via 'image_id' Parameter
Medium
CVE-2025-32606
Listings for Buildium <= 0.1.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-3282
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification
Medium
CVE-2025-3514
SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-26998
SKT Blocks – Gutenberg based Page Builder <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-26908
Kargo Entegratör <= 1.1.14 - Authenticated (Shop Manager+) SQL Injection
Medium
CVE-2025-26982
DSGVO Youtube <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32557
WP Featured Screenshot <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-26903
InPost Gallery <= 2.1.4.3 - Cross-Site Request Forgery
Critical
CVE-2025-26894
Coming Soon, Maintenance Mode <= 1.1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32625
Mobile Pages <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-26880
SKT Skill Bar <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.