Medium
CVE-2019-25223
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-2203
Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-3430
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'printer_text'
Medium
CVE-2025-3429
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'material_text'
Medium
CVE-2025-3427
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
Medium
CVE-2025-1264
Broken Link Checker by AIOSEO <= 1.2.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2024-13604
KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin <= 1.7.4 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-32280
WP Project Manager <= 2.6.24 - Cross-Site Request Forgery
Medium
CVE-2025-32228
Ai Image Alt Text Generator for WP <= 1.1.5 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-32238
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-32148
Daisycon prijsvergelijkers <= 4.8.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-32164
m1.DownloadList <= 0.23 - Authenticated (Contributor+) Sensitive Information Disclosure
Medium
CVE-2025-32204
Split Test For Elementor <= 1.8.3 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-32125
Silvasoft boekhouden <= 3.0.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32257
1 Click WordPress Migration <= 3.1.14 - Unauthenticated Information Disclsoure
Medium
CVE-2025-32121
Video & Photo Gallery for Ultimate Member <= 1.1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32120
Easy Query – WP Query Builder <= 2.0.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32122
uListing <= 2.1.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32124
Behance Portfolio Manager <= 1.7.5 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-32149
teachPress <= 9.0.11 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-32203
Falling things <= 1.08 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-32251
Jetpack Feedback Exporter <= 1.23 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-32255
StaffList <= 3.2.6 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-32127
onOffice for WP-Websites <= 6.5 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.