Medium
CVE-2025-48146
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-46464
Ads Pro Plugin <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-46258
Element Pack Pro <= 7.21.0 - Missing Authorization
Medium
CVE-2025-48080
Uncanny Toolkit for LearnDash <= 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-39491
WHMpress <= 6.2-revision-9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-48135
Aptivada for WP <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-4189
Audio Comments Plugin <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-48132
X Addons for Elementor <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47673
Arconix Shortcodes <= 2.1.16 - Reflected Cross-Site Scripting
Medium
CVE-2025-32299
QuickCal <= 1.0.15 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-47556
CSS3 Compare Pricing Tables for WordPress <= 11.6 - Missing Authorization
Medium
CVE-2025-47560
MapSVG < 8.6.13 - Missing Authorization
Medium
CVE-2025-31065
Rozario <= 1.4 - Missing Authorization
High
CVE-2025-32643
WPGYM < 67.8.0 - Unauthenticated SQL Injection
High
CVE-2025-47640
Printcart Web to Print Product Designer for WooCommerce <= 2.4.0 - Unauthenticated SQL Injection
Medium
CVE-2025-39493
Rankie < 1.8.2 - Missing Authorization
Medium
CVE-2025-48112
Dot html,php,xml etc pages <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-32307
Chameleon HTML5 Audio Player With/Without Playlist <= 3.5.6 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-48128
Sharespine Woocommerce Connector <= 4.7.55 - Missing Authorization
Medium
CVE-2025-46257
Element Pack Pro <= 7.21.0 - Cross-Site Request Forgery
Medium
CVE-2025-4101
MultiVendorX – WooCommerce Multivendor Marketplace Solutions <= 4.2.22 - Incorrect Authorization to Authenticated (Contributor+) Arbitrary Post Deletion
Critical
CVE-2025-32304
WPCHURCH <= 2.7.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32301
CountDown Pro WP Plugin <= 2.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-3527
EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.