Medium
CVE-2025-3433
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-3430
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Medium
CVE-2025-32227
Asgaros Forum <= 3.0.0 - Authenticated (Subscriber+) Authorization Bypass
Medium
CVE-2025-22263
Global Gallery <= 8.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-2876
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
Medium
CVE-2025-32114
5sterrenspecialist <= 1.4 - Reflected Cross-Site Scripting
High
CVE-2025-32215
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-0627
WordPress Tag, Category, and Taxonomy Manager – AI Autotagger <= 3.32.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-32209
Nomupay Payment Processing Gateway <= 7.1.5 - Authenticated (Subscriber+) Arbitrary File Download
Medium
CVE-2025-32210
CM Registration and Invitation Codes <= 2.5.5 - Missing Authorization
Medium
CVE-2025-3429
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
Medium
CVE-2025-32243
Internal Link Optimiser <= 5.1.2 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-2568
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update
Medium
CVE-2025-3432
AAWEP Obfuscator <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-3427
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
Medium
CVE-2025-32116
QR Master <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-32117
Widgetize Pages Light <= 3.0 & Widgets as Shortcodes <= 5.9.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-13688
Admin and Site Enhancements (ASE) <= 7.6.9 - Password Protection Bypass
High
CVE-2025-2526
Streamit <= 4.0.2 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account Takeover
Medium
CVE-2025-1264
Broken Link Checker by AIOSEO <= 1.2.3 - Authenticated (Contributor+) SQL Injection
Critical
CVE-2025-2941
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.4 - Unauthenticated Arbitrary File Move
High
CVE-2024-13776
ZoomSounds - WordPress Wave Audio Player with Playlist <= 6.91 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update and Settings Manipulation
Medium
CVE-2025-2789
MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution <= 4.2.19 - Missing Authorization to Unauthenticated Table Rates Deletion
High
CVE-2024-13604
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.