Medium
CVE-2025-32228
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-32136
ActiveCampaign <= 8.1.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-32148
Daisycon prijsvergelijkers <= 4.8.4 - Authenticated (Contributor+) SQL Injection
High
CVE-2025-32118
CMP – Coming Soon & Maintenance <= 4.1.13 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-32234
AdMail – Multilingual Back in-Stock Notifier for WooCommerce <= 1.7.0 - Missing Authorization
High
CVE-2025-32141
MasterStudy LMS <= 3.5.28 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32157
Sparkle Elementor Kit <= 2.0.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32137
s2Member <= 250419 - Authenticated (Administrator+) Local File Inclusion
High
CVE-2025-32154
Catch Dark Mode <= 2.0.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32156
Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32155
Beds24 Online Booking <= 2.0.28 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32277
CRM WordPress Plugin – RepairBuddy <= 3.8213 - Missing Authorization
High
CVE-2025-32159
Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32151
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32160
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32152
Slider a SlidersPack <= 2.3 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-32142
Motors <= 1.4.71 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-2907
Order Delivery Date for WooCommerce 2.0 - 12.3.1- Unauthenticated Arbitrary Options Update
Medium
CVE-2025-32268
QR Code Tag for WC order emails <= 1.9.36 - Cross-Site Request Forgery
High
CVE-2025-32146
JS Job Manager <= 2.0.2 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-31405
Fami WooCommerce Compare <= 1.0.5 - Unauthenticated Local File Inclusion
High
CVE-2025-32153
VG WooCarousel <= 1.3 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-30582
DyaPress ERP/CRM <= 18.0.2.0 - Unauthenticated Local File Inclusion
High
CVE-2025-32150
Real Estate Manager <= 7.3 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.