Medium
CVE-2025-32487
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-32575
WP w3all phpBB <= 2.9.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32671
Print Science Designer <= 1.3.155 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-32616
Nimbata Call Tracking <= 1.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32683
MapSVG Lite <= 8.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32477
WP-Easy Menu <= 0.41 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32640
One Click Accessibility <= 3.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-32644
IP2Location World Clock <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32601
Twispay Credit Card Payments <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-32555
SEO, Nutrition and Print for Recipes by Edamam <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32502
ePaper Lister for Yumpu <= 1.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32690
PowerPress Podcasting <= 11.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32478
WP SexyLightBox <= 0.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32525
Interactive Geo Maps <= 1.6.24 - Reflected Cross-Site Scripting
Critical
CVE-2025-32614
EventON <= 2.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32536
HTML5 Video Player with Playlist <= 2.50 - Reflected Cross-Site Scripting
Critical
CVE-2025-32627
JS Job Manager <= 2.0.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-31020
Simple Spoiler <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-32587
WooCommerce Pickupp <= 2.4.0 - Unauthenticated Local File Inclusion
Medium
CVE-2025-31008
YouTube Embed <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2025-32654
Motors <= 1.4.71 - Unauthenticated Local File Inclusion
High
CVE-2025-31038
Essential Breadcrumbs <= 1.1.1 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2025-32659
FraudLabs Pro for WooCommerce <= 2.22.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32523
WooCommerce – Payphone Gateway <= 3.2.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.