Medium
CVE-2025-32126
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
High
CVE-2025-2317
Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter
High
CVE-2025-31403
Booking Calendar and Notification <= 4.0.3 - Unauthenticated SQL Injection
Medium
CVE-2025-31558
TailPress <= 0.4.4 - Unauthenticated Sensitive Information Exposure
High
CVE-2025-31911
Social Share And Social Locker <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2024-12410
Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection
Medium
CVE-2025-31842
Viral Loops WP Integration <= 3.8.1 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-31848
WordPress Adverts Plugin <= 1.4 - Missing Authorization
Medium
CVE-2025-31832
ACF City Selector <= 1.16.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-31910
BookingPress <= 1.1.28 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-31089
Order Splitter for WooCommerce <= 5.3.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-31421
Srbtranslatin <= 3.2.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-31788
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-31550
WP-LESS <= 1.9.6 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-31542
My auctions allegro <= 3.6.20 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-31001
GTM Kit <= 2.4.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-31547
Uptime Robot Plugin for WordPress <= 2.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-31553
Advanced WooCommerce Product Sales Reporting <= 4.1.1 - Unauthenticated SQL Injection
Medium
CVE-2025-31561
Ultimate Push Notifications <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-30961
Trackserver <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31619
Actionwear products sync < 3.1.13 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-30971
XV Random Quotes <= 2.0.0 - Unauthenticated SQL Injection
Medium
CVE-2025-31609
WPCargo Track & Trace <= 8.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference
High
CVE-2025-31552
RSVPMarker <= 11.6.7 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.