Medium
CVE-2025-31466
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-31453
YouTube SimpleGallery <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31449
The Visitor Counter <= 1.4.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31079
Usermaven <= 1.2.1 - Cross-Site Request Forgery
Critical
CVE-2025-31087
Multiple Shipping And Billing Address For Woocommerce <= 1.5 - Unauthenticated PHP Object Injection
Medium
CVE-2025-31443
KK I Like It <= 1.7.5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31437
WP-OGP <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31472
Flatty <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31440
Terms of Use <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31090
Dropdown Multisite selector < 0.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31474
WP Database Optimizer <= 1.2.1.3 - Cross-Site Request Forgery
Medium
CVE-2025-31073
Unlimited <= 1.45 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31471
Duplicate Page and Post <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31450
Toggle Box <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31469
Clear Sucuri Cache <= 1.4 - Missing Authorization
Critical
CVE-2025-31084
Sunshine Photo Cart <= 3.4.10 - Unauthenticated PHP Object Injection
Medium
CVE-2025-31094
WP Posts Carousel <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31419
Churel <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-31095
Material Dashboard <= 1.4.5 - Unauthenticated Privilege Escalation
Medium
CVE-2025-31433
Magic Embeds <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31463
TGG WP Optimizer <= 1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31096
PostX <= 4.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-27001
Shipmondo – A complete shipping solution for WooCommerce <= 5.0.3 - Missing Authorization to Authenticated (Customer+) Information Disclosure
Medium
CVE-2025-31452
WP Ultimate Search <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.