Medium
CVE-2025-31583
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-31590
WP Date and Time Shortcode <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31576
PostmarkApp Email Integrator <= 2.4 - Missing Authorization
Medium
CVE-2025-31585
Leadfox for WordPress <= 2.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31546
Swiss Toolkit For WP <= 1.4.0 - Missing Authorization
High
CVE-2025-30807
Next-Cart Store to WooCommerce Migration <= 3.9.4 - Unauthenticated SQL Injection
Medium
CVE-2025-31527
WP Link Preview <= 1.4.1 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-64287
Alloggio - Hotel Booking <= 1.8 - Unauthenticated Local File Inclusion
High
CVE-2025-30774
Quiz Maker <= 6.6.8.7 - Unauthenticated SQL Injection
Critical
CVE-2025-31387
InstaWP Connect <= 0.1.0.82 - Unauthenticated Local File Inclusion
High
CVE-2025-31016
JetWooBuilder <= 2.1.18 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-30793
Houzez Property Feed <= 2.5.4 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-31043
JetSearch <= 3.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-22288
Smush Image Compression and Optimization <= 3.17.0 - Authenticated (Admin+) Directory Traversal
Medium
CVE-2025-31417
WP Docs <= 2.2.6 - Missing Authorization
Medium
CVE-2025-30963
JetSmartFilters <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-30782
Subscribe to Download Lite <= 1.2.9 - Authenticated (Subscriber+) Local File Inclusion
Medium
CVE-2025-30987
JetBlocks For Elementor <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31414
Cost Calculator Builder <= 3.2.65 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30594
Include URL <= 0.3.5 - Authenticated (Contributor+) Arbitrary File Download
Medium
CVE-2025-31412
JetProductGallery <= 2.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13557
Shortcodes by United Themes <= 5.1.6 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-2803
So-Called Air Quotes <= 0.1 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-2840
DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.