Medium
CVE-2025-31810
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-31771
Team Members for Elementor Page Builder <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31786
Simple Icons <= 2.8.4 - Missing Authorization
High
CVE-2025-31855
SMM API <= 6.0.30 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31886
Social proof testimonials and reviews by Repuso <= 5.21 - Missing Authorization
Medium
CVE-2025-31462
CGM Event Calendar <= 0.8.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31853
Smartarget Popup <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31859
Feedbucket – Website Feedback Tool <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-31550
WP-LESS <= 1.9.6 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-31741
Easy Magazine <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-2891
WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload
Medium
CVE-2024-12189
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-2008
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-31617
PostmarkApp Email Integrator <= 2.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31597
Ultimate Live Cricket WordPress Lite <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-2237
WP RealEstate <= 1.6.26 - Unauthenticated Privilege Escalation via 'process_register'
Medium
CVE-2025-31616
Varnish WordPress <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31542
My auctions allegro <= 3.6.20 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-31592
Send E-mail <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31601
Appointy Appointment Scheduler <= 4.2.1 - Cross-Site Request Forgery to Settings Change
Medium
CVE-2025-31596
Chat by Chatwee <= 2.1.3 - Missing Authorization
Medium
CVE-2025-31557
OSM – OpenStreetMap <= 6.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31566
Rio Video Gallery <= 2.3.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31621
byBrick Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.