Medium
CVE-2025-2906
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-31406
ELEX WooCommerce Request a Quote <= 2.3.9 - Missing Authorization
Medium
CVE-2025-31564
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.2.7 - Authenticated (Subscriber+) SQL Injection
High
CVE-2025-31534
Shopper <= 3.2.5 - Unauthenticated SQL Injection
Medium
CVE-2025-31024
RJ Quickcharts <= 0.6.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-31530
Google SEO Pressor Snippet <= 2.0 - Missing Authorization
Medium
CVE-2025-31562
Uptime Robot Plugin for WordPress <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31525
WP Mobile Bottom Menu <= 1.4.0 - Missing Authorization
High
CVE-2024-13567
Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Medium
CVE-2025-31600
DesignO <= 2.2.0 - Cross-Site Request Forgery
High
CVE-2024-12278
Booster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31533
Salesmate Add-On for Gravity Forms <= 2.0.3 - Missing Authorization
Medium
CVE-2025-31598
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 4.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31587
Elfsight Testimonials Slider <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31606
SP Blog Designer <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-31591
Exit Popup Free <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31386
Simple:Press <= 6.10.5 - Missing Authorization
Medium
CVE-2025-31624
Processing Projects <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31595
Timeline Event History <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31584
Elfsight Testimonials Slider <= 1.0.1 - Missing Authorization
Medium
CVE-2025-31580
Ni WooCommerce Product Enquiry <= 4.1.8 - Missing Authorization
Medium
CVE-2025-31583
WP Copy Media URL <= 2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31590
WP Date and Time Shortcode <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31576
PostmarkApp Email Integrator <= 2.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.