Medium
CVE-2025-32621
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-32485
WP Performance Pack <= 2.5.4 - Cross-Site Request Forgery
Medium
CVE-2025-31028
WP Hide Categories <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-3471
SureForms – Drag and Drop Form Builder for WordPress <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Settings Update
Medium
CVE-2025-32617
Multiple Location Google Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32623
PlainInventory <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32642
Vite Coupon <= 1.0.9 - Cross-Site Request Forgery to Remote Code Execution
Medium
CVE-2025-31390
Social Crowd <= 0.9.6.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32645
Custom Posts Order <= 4.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31032
Pagopar – WooCommerce Gateway <= 2.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32542
Eazy Plugin Manager <= 4.3.0 - Missing Authorization
Medium
CVE-2025-32537
Lock Your Updates <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31035
WP Editor.md – The Perfect WordPress Markdown Editor <= 10.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31395
Easy Custom CSS <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32684
MapSVG Lite <= 8.6.4 - Missing Authorization
Medium
CVE-2025-32632
Automatic Ban IP <= 1.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-31404
AF Tell a Friend <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-31040
WP Food ordering and Restaurant Menu <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-31002
Squeeze <= 1.6 - Authenticated (Admin+) Arbitrary File Upload
Critical
CVE-2025-32663
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
High
CVE-2025-32550
Click & Pledge Connect Plugin <= 2.24080000-WP6.6.1 - Unauthenticated SQL Injection
Medium
CVE-2025-32559
REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32494
reCAPTCHA Jetpack <= 0.2.2 - Cross-Site Request Forgery
Medium
CVE-2025-32597
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.