Medium
CVE-2025-32270
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-32175
VK Filter Search <= 2.20.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1233
Lafka Plugin <= 7.1.0 - Missing Authorization to Authenticated (Subscriber+) Theme Option Update
Medium
CVE-2025-32198
Brizy <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-2525
Streamit <= 4.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-32229
Variable Inspector < 2.7.1 - Missing Authorization
Medium
CVE-2025-32235
MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.9.4 - Missing Authorization
High
CVE-2025-32157
Sparkle Elementor Kit <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32184
Ultimate Store Kit Elementor Addons <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32162
Chamber Dashboard Business Directory <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32139
FooBox Image Lightbox <= 2.7.33 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-32181
Search, Filters & Merchandising for WooCommerce <= 3.0.58 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32125
Silvasoft boekhouden <= 3.0.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-32137
s2Member <= 250419 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-32236
Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic <= 1.9 - Missing Authorization
High
CVE-2025-32154
Catch Dark Mode <= 2.0.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32193
Simple WP Events <= 1.8.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32233
Revive.so – Bulk Rewrite and Republish Blog Posts <= 2.0.3 - Missing Authorization
High
CVE-2025-32156
Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32178
6Storage Rentals <= 2.19.4 - Missing Authorization
Medium
CVE-2025-32266
404 Image Redirection (Replace Broken Images) <= 1.4 - Cross-Site Request Forgery
Medium
CVE-2025-32278
Table Block by RioVizual <= 2.3.1 - Cross-Site Request Forgery
Medium
CVE-2025-32263
Sequential Order Numbers for WooCommerce <= 3.6.2 - Cross-Site Request Forgery
Medium
CVE-2025-32258
Simple Website Logo <= 1.1 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.