Medium
CVE-2025-30880
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2025-30895
WpEvently <= 4.2.9 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-30886
JS Help Desk <= 2.9.2 - Unauthenticated SQL Injection
Medium
CVE-2025-30770
Charitable <= 1.8.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-2332
Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
High
CVE-2025-1913
Product Import Export for WooCommerce <= 2.5.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Medium
CVE-2025-1769
Product Import Export for WooCommerce <= 2.5.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
High
CVE-2025-2110
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Medium
CVE-2025-1490
Smart Maintenance Mode <= 1.5.2 - Reflected Cross-Site Scripting via setstatus Parameter
Medium
CVE-2025-2165
SH Email Alert <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-1440
Advanced iFrame <= 2024.5 - Unauthenticated Settings Update
Medium
CVE-2025-2228
Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.8 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2024-13889
WordPress Importer <= 0.8.3 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2025-1310
Jobs for WordPress <= 2.7.11 - Authenticated (Subscriber+) Arbitrary File Read
High
CVE-2025-2007
Import Export Suite for CSV and XML Datafeed <= 7.19 - Authenticated (Subscriber+) Arbitrary File Deletion
Critical
CVE-2025-2563
User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation
Medium
CVE-2025-30540
AvaiBook <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-30619
SpeakPipe <= 0.2 - Cross-Site Request Forgery
Medium
CVE-2025-2224
Directorist <= 8.2 - Missing Authorization to Unauthenticated Arbitrary Post Publishing
Medium
CVE-2025-30585
Generate Post Thumbnails <= 0.8 - Cross-Site Request Forgery
High
CVE-2025-28904
Web Directory Free <= 1.7.6 - Unauthenticated SQL Injection
Medium
CVE-2025-26747
RainbowNews <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30530
AI Preloader <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-30615
WP e-Commerce Style Email <= 0.6.2 - Cross-Site Request Forgery to Remote Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.