Medium
CVE-2025-31623
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-31586
Gallery – Photo Albums Plugin <= 1.3.170 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31559
Custom Database Applications by Caspio <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31574
Custom Content Scrollbar <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31627
Media Library Assistant <= 3.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31538
Checklist <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1665
Avada Builder <= 3.11.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31410
WP Church Donation <= 1.7 - Cross-Site Request Forgery
Medium
CVE-2025-1512
PowerPack Elementor Addons (Free Widgets, Extensions and Templates) <= 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31528
StaticPress <= 0.4.5 - Missing Authorization
Medium
CVE-2025-31615
Simple Contact Forms <= 1.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-30971
XV Random Quotes <= 2.0.0 - Unauthenticated SQL Injection
Medium
CVE-2025-31589
Ethiopian Calendar <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31609
WPCargo Track & Trace <= 8.0.1 - Authenticated (Contributor+) Insecure Direct Object Reference
High
CVE-2025-31552
RSVPMarker <= 11.6.7 - Unauthenticated SQL Injection
High
CVE-2025-31577
Appointify <= 1.0.8 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-31604
Cal.com <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-31579
WP AutoKeyword <= 1.0 - Unauthenticated SQL Injection
Medium
CVE-2025-31608
CookieHint WP <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-1267
Groundhogg <= 3.7.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter
Medium
CVE-2025-31572
Multi Days Events and Multi Events in One Day Calendar <= 1.1.3 - Cross-Site Request Forgery
High
CVE-2025-31531
History Log by click5 <= 1.0.13 - Unauthenticated SQL Injection
Medium
CVE-2025-31543
Twice Commerce <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31603
CF7 Spreadsheets <= 2.3.2 - Missing Authorization to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.