Medium
CVE-2024-13909
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-32567
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32558
Duplicate Title Checker <= 1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32687
Review Stars Count For WooCommerce <= 2.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32677
WP Social Stream Designer <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32618
Wishlist <= 1.0.44 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-32550
Click & Pledge Connect Plugin <= 2.24080000-WP6.6.1 - Unauthenticated SQL Injection
Medium
CVE-2025-32650
Accessibility Suite by Online ADA <= 4.18 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32616
Nimbata Call Tracking <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32591
WP Abstracts <= 2.7.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32681
Error Log Viewer <= 1.0.5 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-32565
Neon Product Designer <= 2.1.1 - Unauthenticated SQL Injection
High
CVE-2025-31565
WPSmartContracts <= 2.0.10 - Unauthenticated SQL Injection
Medium
CVE-2025-31041
AnyTrack Affiliate Link Manager <= 1.0.4 - Missing Authorization
High
CVE-2025-32603
WP Online Users Stats <= 1.0.0 - Unauthenticated SQL Injection
Medium
CVE-2025-32676
Verowa Connect <= 3.0.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32685
WP Inquiries <= 0.2.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-3100
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2025-31599
Bulk Product Sync <= 8.6 - Unauthenticated SQL Injection
Medium
CVE-2024-13820
Melhor Envio <= 2.15.11 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash
Medium
CVE-2025-32119
CardGate Payments for WooCommerce <= 3.2.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-3428
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
Medium
CVE-2025-3436
coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32128
Nearby Locations <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.