Medium
CVE-2025-32211
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-32115
Popping Content Light <= 2.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-2203
Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32242
Hive Support <= 1.2.5 - Missing Authorization
High
CVE-2025-3431
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-2808
Motors – Car Dealership & Classified Listings Plugin <= 1.4.63 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-32208
Hive Support <= 1.2.5 - Missing Authorization
Medium
CVE-2024-9771
WP-Recall <= 16.26.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-3433
Advanced Advertising System <= 1.3.1 - Open Redirect
Medium
CVE-2025-3430
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Medium
CVE-2025-32227
Asgaros Forum <= 3.0.0 - Authenticated (Subscriber+) Authorization Bypass
Medium
CVE-2025-22263
Global Gallery <= 8.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-2876
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Medium
CVE-2025-32114
5sterrenspecialist <= 1.4 - Reflected Cross-Site Scripting
High
CVE-2025-32215
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-0627
WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-32209
Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-32210
CM Registration and Invitation Codes <= 2.5.5 - Missing Authorization
Medium
CVE-2025-3429
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
Medium
CVE-2025-32243
Internal Link Optimiser <= 5.1.2 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-2568
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update
Medium
CVE-2025-3432
AAWEP Obfuscator <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-3427
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
Medium
CVE-2025-32116
QR Master <= 1.0.5 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.