Medium
CVE-2025-31054
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-48238
AWcode Toolkit <= 1.0.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-48341
Form Maker by 10Web <= 1.15.33 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48340
User Profile Meta Manager <= 1.02 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2025-48247
Shortlinks by Pretty Links <= 3.6.15 - Missing Authorization
Medium
CVE-2025-48232
Xpro Addons For Beaver Builder – Lite <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48280
AutomatorWP <= 5.2.1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-48266
Active Products Tables for WooCommerce <= 1.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48236
bunny.net <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48285
Falang multilanguage <= 1.3.61 - Cross-Site Request Forgery
Medium
CVE-2025-48237
Wishlist for WooCommerce <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48243
reCAPTCHA for all <= 2.26 - Cross-Site Request Forgery
High
CVE-2025-60223
WPBot Pro Wordpress Chatbot <= 13.6.5 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-31049
Dash <= 1.3 - Unauthenticated PHP Object Injection
High
CVE-2025-60245
User Manager <= 2.9.12 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-48264
Product Code for WooCommerce <= 1.5.0 - Cross-Site Request Forgery to Database Update
Medium
CVE-2025-48268
Bot for Telegram on WooCommerce <= 1.2.6 - Missing Authorization
Medium
CVE-2025-48278
RSVPMarker <= 11.5.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-48235
WP Image Mask <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48260
GDPR CCPA Compliance Support <= 2.7.3 - Missing Authorization
Medium
CVE-2025-3582
Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-48288
ElementInvader Addons for Elementor <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48233
Affiliates Manager Google reCAPTCHA Integration <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-48346
Embed and Integrate Etsy Shop <= 1.0.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.