Medium
CVE-2025-31802
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,642
Medium
CVE-2025-31870
WP AutoKeyword <= 1.0 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2025-31823
WPoperation Elementor Addons <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31778
Donate Me <= 1.2.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-31747
WP Chrono <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31754
DobsonDev Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31840
Simple Fixed Notice <= 1.6 - Cross-Site Request Forgery
Medium
CVE-2025-31801
MX Time Zone Clocks <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31826
Ni WooCommerce Cost Of Goods <= 3.2.8 - Missing Authorization
Medium
CVE-2025-30852
Oracle Cards Lite <= 1.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31809
Labinator Content Types Duplicator <= 1.1.3 - Cross-Site Request Forgery
Medium
CVE-2025-31864
Beam me up Scotty – Back to Top Button <= 1.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-2594
User Registration & Membership <= 4.1.2 - Authentication Bypass
Medium
CVE-2025-31852
Bulk Product Sync <= 8.6 - Cross-Site Request Forgery
Medium
CVE-2025-31445
Pages Order <= 1.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-31854
Simple Sticky Add To Cart For WooCommerce <= 1.4.6 - Missing Authorization
Medium
CVE-2025-31594
Auto scroll for reading <= 1.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-31821
Integration of Zoho CRM and Contact Form 7 <= 1.0.6 - Open Redirect
Medium
CVE-2025-31861
Perfect Font Awesome Integration <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-30996
Multiple Themify Themes <= Various Versions - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2025-31734
Simple Post Expiration <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31797
Sprout Clients <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31730
Marketer Addons <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-30892
WpTravelly <= 1.8.7 - Authenticated (Contributor+) PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.