Medium
CVE-2025-31791
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,641
Medium
CVE-2025-31819
Nova Blocks by Pixelgrade <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31737
Client Showcase <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31831
AtomChat <= 1.1.7 - Missing Authorization
Medium
CVE-2025-31887
MyBookProgress by Stormhill Media <= 1.0.8 - Missing Authorization
Medium
CVE-2025-31751
Breaking News WP <= 1.3 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-31882
WebinarPress <= 1.33.27 - Missing Authorization
Medium
CVE-2025-31803
Turisbook Booking System <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31733
WP Sitemap <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31815
Design Blocks <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31780
Append Content <= 2.1.1 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2025-31877
RestroPress <= 3.2.8 - Missing Authorization
Critical
CVE-2025-30580
DigiWidgets Image Editor <= 1.10 - Unauthenticated Remote Code Execution
High
CVE-2025-31080
HTML Forms <= 1.5.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31563
AI Search Bar <= 2.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-30825
WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce <= 1.3.5 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2025-31750
Breaking News WP <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31847
mFolio Lite <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31743
Lightweight and Responsive Youtube Embed <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31761
Hypotext <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31895
ABC Notation <= 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31835
WP Plugin Info Card <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31081
Enable Media Replace <= 4.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31908
JSON Structuring Markup <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.