Medium
CVE-2025-3471
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-32623
PlainInventory <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-31040
WP Food ordering and Restaurant Menu <= 1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32663
FAT Cooming Soon <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32559
REVE Chat <= 6.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32597
WordPress Events Calendar Plugin – connectDaily <= 1.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32144
Job Board Manager <= 2.1.60 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-32563
WP Calais Auto Tagger <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32694
Ultimate WP Mail <= 1.3.9 - Open Redirect
Critical
CVE-2025-32656
Testimonial Slider And Showcase Pro <= 2.3.15 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32519
IDonate <= 2.1.9 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32505
MultiMailer <= 1.0.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2025-32589
Flexi – Guest Submit <= 4.28 - Unauthenticated Local File Inclusion
High
CVE-2025-32143
Accordion <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-32580
DeBounce Email Validator <= 5.8.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32671
Print Science Designer <= 1.3.155 - Unauthenticated Arbitrary File Download
Critical
CVE-2025-32614
EventON <= 2.4 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32627
JS Job Manager <= 2.0.2 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32587
WooCommerce Pickupp <= 2.4.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-32654
Motors <= 1.4.71 - Unauthenticated Local File Inclusion
Low
CVE-2025-31003
Squeeze <= 1.6 - Authenticated (Admin+) Full Path Disclosure
Critical
CVE-2025-32668
Real Estate Manager <= 7.3 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32517
MultiMailer <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2025-32585
Shop Products Filter <= 1.2 - Authenticated (Subscriber+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.