Medium
CVE-2025-31537
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-31421
Srbtranslatin <= 3.2.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-31788
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-31906
WP Profitshare <= 1.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31830
Printus <= 1.2.6 - Missing Authorization
Medium
CVE-2025-31548
Ultimate Push Notifications <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-31742
Dima Take Action <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31812
BuddyPress Members Only <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31810
Question Answer <= 1.2.70 - Missing Authorization
Medium
CVE-2025-31771
Team Members for Elementor Page Builder <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31786
Simple Icons <= 2.8.4 - Missing Authorization
High
CVE-2025-31855
SMM API <= 6.0.30 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31886
Social proof testimonials and reviews by Repuso <= 5.21 - Missing Authorization
Medium
CVE-2025-31462
CGM Event Calendar <= 0.8.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31853
Smartarget Popup <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31859
Feedbucket – Website Feedback Tool <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-31550
WP-LESS <= 1.9.6 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-31741
Easy Magazine <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-2891
WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload
Medium
CVE-2024-12189
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-2008
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-31617
PostmarkApp Email Integrator <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31597
Ultimate Live Cricket WordPress Lite <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-2237
WP RealEstate <= 1.6.26 - Unauthenticated Privilege Escalation via 'process_register'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.