Medium
CVE-2025-30806
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2025-30879
MC Woocommerce Wishlist <= 1.8.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-30784
WP Subscription Forms <= 1.2.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-30886
JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection
Medium
CVE-2025-22783
SEO Plugin by Squirrly SEO <= 12.4.03 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-26898
Traveler <= 3.2.0 - Unauthenticated SQL Injection
Critical
CVE-2025-30622
postMash Custom – custom post order <= 1.0.3 - Unauthenticated SQL Injection
Medium
CVE-2025-30765
FlexStock <= 3.13.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-30562
Navigation Tree Elementor <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-30524
Product Catalog – Catalog for WordPress <= 1.0.4 - Unauthenticated SQL Injection
Medium
CVE-2025-2228
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.8 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-30523
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-28873
Shuffle <= 0.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-30525
WP Profitshare <= 1.4.9 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-2252
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure
Medium
CVE-2025-30604
JiangQie Official Website Mini Program <= 1.8.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-28898
WP Multistore Locator <= 2.5.2 - Unauthenticated SQL Injection
Medium
CVE-2025-30571
STEdb Forms <= 1.0.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-30570
دکمه، شبکه اجتماعی خرید <= 2.0.6 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-30609
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-30590
Flickr set slideshows <= 0.9 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-28904
Web Directory Free <= 1.7.6 - Unauthenticated SQL Injection
Medium
CVE-2025-30583
Pro Rank Tracker <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30569
WP Featured Entries <= 1.0 - Authenticated (Contributor+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.