Medium
CVE-2025-32559
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 281
Reset filters
Medium
CVE-2025-32214
Hive Support <= 1.2.11 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-32242
Hive Support <= 1.2.5 - Missing Authorization
Medium
CVE-2025-32208
Hive Support <= 1.2.5 - Missing Authorization
Medium
CVE-2025-30777
Support Genix <= 1.4.11 - Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2024-13882
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-13816
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
Medium
CVE-2024-13552
SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.0 - Insecure Direct Object Reference
Medium
CVE-2025-0329
AI ChatBot for WordPress – WPBot <= 6.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-26932
ChatBot <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-24666
AI Chatbot for WordPress – Hyve Lite <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-0429
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms
Medium
CVE-2024-12879
WPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation
High
CVE-2025-0428
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Medium
CVE-2024-13360
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-13361
AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Critical
CVE-2024-13091
WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload
Medium
CVE-2025-22813
Conversational Forms for ChatBot <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22571
Instabot <= 1.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12541
Chative Live chat and Chatbot <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function
Medium
CVE-2025-22298
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
Medium
CVE-2024-54304
Hive Support – WordPress Help Desk <= 1.1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-54321
Hive Support – WordPress Help Desk <= 1.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-54306
AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot <= 1.6.2 - Cross-Site Request Forgery via update_integration_option
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.