Medium
CVE-2025-32651
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 391
Reset filters
High
CVE-2025-31411
Linet ERP-Woocommerce Integration <= 3.5.12 - Authenticated (Admin+) Arbitrary File Read & Deletion
Medium
CVE-2025-32691
PowerPress Podcasting <= 11.12.6 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-32690
PowerPress Podcasting <= 11.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-30582
DyaPress ERP/CRM <= 18.0.2.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-31436
Blubrry PowerPress Podcasting plugin MultiSite add-on <= 0.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-1512
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30896
WP ERP <= 1.13.4 - Missing Authorization
Medium
CVE-2024-9230
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-2076
binlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12812
WP ERP <= 1.13.3 - Authenticated (Employee+) Insecure Direct Object Reference
Medium
CVE-2024-12808
WP ERP <= 1.13.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9227
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-13873
WP Job Portal <= 2.2.8 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Photo Disconnection
Medium
CVE-2025-1043
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 - Authenticated (Contributor+) Blind Server-Side Request Forgery via embeddoc Shortcode
Medium
CVE-2024-13743
Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2024-12822
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update
High
CVE-2024-12821
Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-24594
Linet ERP-Woocommerce Integration <= 3.5.7 - Cross-Site Request Forgery
Medium
CVE-2025-24669
SERPed.net <= 4.4 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-23807
Spiderpowa Embed PDF <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23654
Twitter Post <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-23792
Passwordless WP – Login with your glance or fingerprint <= 1.1.6 - Reflected Cross-Site Scripting
High
CVE-2025-23529
Minterpress <= 1.0.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.