Medium
CVE-2025-32690
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-32478
WP SexyLightBox <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32525
Interactive Geo Maps <= 1.6.24 - Reflected Cross-Site Scripting
Critical
CVE-2025-32614
EventON <= 2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32536
HTML5 Video Player with Playlist <= 2.50 - Reflected Cross-Site Scripting
Critical
CVE-2025-32627
JS Job Manager <= 2.0.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-31020
Simple Spoiler <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-32587
WooCommerce Pickupp <= 2.4.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-31008
YouTube Embed <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-32654
Motors <= 1.4.71 - Unauthenticated Local File Inclusion
High
CVE-2025-31038
Essential Breadcrumbs <= 1.1.1 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2025-32659
FraudLabs Pro for WooCommerce <= 2.22.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32523
WooCommerce – Payphone Gateway <= 3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-32591
WP Abstracts <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32681
Error Log Viewer <= 1.0.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-32565
Neon Product Designer <= 2.1.1 - Unauthenticated SQL Injection
Medium
CVE-2025-32551
Connector to CiviCRM with CiviMcRestFace <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-32497
Spoiler Block <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-31565
WPSmartContracts <= 2.0.10 - Unauthenticated SQL Injection
Low
CVE-2025-31003
Squeeze <= 1.6 - Authenticated (Admin+) Full Path Disclosure
Medium
CVE-2025-31021
Mobile Smart <= v1.3.16 - Reflected Cross-Site Scripting
Medium
CVE-2025-32600
Tournamatch <= 4.6.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-32612
User Session Synchronizer <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32489
Wetterwarner <= 2.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.