High
CVE-2025-31411
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-32670
Spark GF Failed Submissions <= 1.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-32674
Product Excel Import Export & Bulk Edit for WooCommerce <= 4.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-32620
Doppler Forms <= 2.4.6 - Missing Authorization
High
CVE-2025-30967
WPJobBoard < 5.11.1 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2025-32535
DN Shipping by Weight for WooCommerce <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-32611
WooCommerce TBC Credit Card Payment Gateway (Free) <= 2.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-32514
WooCommerce Estimate and Quote <= 1.0.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-13909
Accredible Certificates & Open Badges <= 1.4.9 - Authenticated (Administrator+) SQL Injection via orderby Parameter
Medium
CVE-2024-10894
Payment Forms for Paystack <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-3417
Embedder 1.3 - 1.3.5 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2025-2809
azurecurve Shortcodes in Comments <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-2805
ORDER POST <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-2719
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
High
CVE-2025-3102
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
Medium
CVE-2025-32691
PowerPress Podcasting <= 11.12.6 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-32567
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-31383
FrescoChat Live Chat <= 3.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31375
Scheduled <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32541
WooCommerce Sales MIS Report <= 4.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-31026
Comment Validation Reloaded <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32499
Logo Showcase Ultimate <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32558
Duplicate Title Checker <= 1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32687
Review Stars Count For WooCommerce <= 2.0 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.