Medium
CVE-2025-31758
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Critical
CVE-2025-30985
GNUCommerce <= 1.5.4 - Unauthenticated PHP Object Injection
Medium
CVE-2025-2836
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-31407
Tiger <= 2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-31582
Contact Form vCard Generator <= 2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31739
Minimalistic Event Manager <= 1.1.1 - Missing Authorization
Medium
CVE-2025-2299
LuckyWP Table of Contents <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2025-22281
Simplish <= 2.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-30984
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-31794
WR Price List Manager For Woocommerce <= 1.0.8 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2025-31900
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Medium
CVE-2025-31384
Videos <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31736
Rich Text Editor <= 1.0.1 - Missing Authorization
Medium
CVE-2025-30916
Residential Address Detection <= 2.5.4 - Missing Authorization
Medium
CVE-2025-31905
Team Rosters <= 4.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-31898
MediaView <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-31902
Social Share And Social Locker <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31027
Tiger <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-31573
PeproDev CF7 Database <= 2.0.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-31911
Social Share And Social Locker <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2025-31581
WP Video Playlist <= 1.1.2 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-31418
Gravel <= 1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-31893
Botnet Attack Blocker <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-31622
Advanced Typekit <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.