Medium
CVE-2025-31434
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-31457
LWS SMS <= 2.4.1 - Cross-Site Request Forgery
Medium
CVE-2025-1705
tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-2074
Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
Medium
CVE-2025-2804
tagDiv Composer <= 5.3 - Reflected Cross-Site Scripting via 'account_id' and 'account_username'
Critical
CVE-2025-2294
Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-30840
xili-dictionary <= 2.12.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-30897
Analytify <= 5.5.1 - Missing Authorization to Authenticated (Subscriber+) Minor Settings Update
Medium
CVE-2025-30924
Primer MyData for Woocommerce < 4.2.4 - Reflected Cross-Site Scripting
Critical
CVE-2025-30870
WP Travel Engine <= 6.3.5 - Unauthenticated Local File Inclusion
Medium
CVE-2025-30763
EO4WP <= 1.0.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30798
Better WishList API <= 1.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-1523
Ultimate Dashboard <= 3.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-30820
WishSuite <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-30877
Quiz Cat <= 3.0.8 - Missing Authorization
High
CVE-2025-30772
WPC Smart Upsell Funnel for WooCommerce <= 3.0.4 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2025-30795
Automation By Autonami <= 3.5.1 - Open Redirect
Medium
CVE-2025-30909
Conversios.io <= 7.2.3 - Missing Authorization
Medium
CVE-2025-30801
TWB Woocommerce Reviews <= 1.7.7 - Cross-Site Request Forgery
Medium
CVE-2025-30899
User Registration <= 4.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30926
King Addons for Elementor <= 24.12.58 - Missing Authorization
Medium
CVE-2025-22739
LearnPress <= 4.2.7.5 - Missing Authorization
Medium
CVE-2025-30860
Off-Canvas Sidebars & Menus (Slidebars) <= 0.5.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-30814
The Post Grid <= 7.7.17 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.