Medium
CVE-2025-30535
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2025-30526
Typekit plugin for WordPress <= 1.2.3 - Cross-Site Request Forgery
Medium
CVE-2025-30537
Upload Quota per User <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30605
sourceplay-navermap <= 0.0.2 - Missing Authorization
Medium
CVE-2025-30552
WordPress Admin Bar Improved <= 3.3.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30600
WP Hotjar <= 0.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30612
Replace Default Words <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30623
wA11y – The Web Accessibility Toolbox <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30550
CallPhone'r <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30577
Browser Address Bar Color <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30545
issuuPress <= 1.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30556
Fix Rss Feeds <= 3.1 - Cross-Site Request Forgery
Medium
CVE-2025-30531
WP Ride Booking <= 2.4 - Cross-Site Request Forgery
Medium
CVE-2025-26739
newseqo <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30591
Music Press Pro <= 1.4.6 - Missing Authorization
Medium
CVE-2025-2252
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy <= 3.3.6.1 - Unauthenticated Private Post Title Disclosure
Medium
CVE-2025-30586
cTabs <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30565
banner-manager <= 16.04.19 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30533
Message ticker <= 9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30542
SoundCloud Ultimate <= 1.5 - Cross-Site Request Forgery
Medium
CVE-2025-26922
AuraMart <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30584
AlphaOmega Captcha & Anti-Spam Filter <= 3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-30608
WordPress SQL Backup <= 3.5.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-28858
Arrow Maps <= 1.0.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.