Medium
CVE-2025-47443
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-47674
Credova_Financial <= 2.5.0 - Cross-Site Request Forgery
Medium
CVE-2025-47596
Beacon Lead Magnets and Lead Capture <= 1.5.8 - Cross-Site Request Forgery
Medium
CVE-2025-47519
Easy PayPal Events <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2025-47523
Seznam Webmaster <= 1.4.7 - Cross-Site Request Forgery
Medium
CVE-2025-39361
Royal Elementor Addons <= 1.7.1017 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47522
AWEOS WP Lock <= 1.4.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47460
TrackShip for WooCommerce <= 1.9.1 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2025-47525
Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47664
WP Pipes <= 1.4.3 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2025-47659
WPBakery Visual Composer WHMCS Elements <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47504
Multiple Plugins by wpcodefactory <= Various Versions - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47521
Robo Gallery <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-47590
WPSpeed <= 2.6.5 - Cross-Site Request Forgery
High
CVE-2025-47494
EventON <= 2.4.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47493
Ultimate Blocks <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-47653
WP-Recall <= 16.26.14 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47537
PDF Invoices for WooCommerce + Drag and Drop Template Builder <= 5.3.8 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-47657
Productive Commerce <= 1.1.22 - Unauthenticated SQL Injection
Medium
CVE-2025-47602
Calculate Prices based on Distance For WooCommerce <= 1.3.5 - Missing Authorization
Medium
CVE-2025-47609
EasyMe Connect <= 3.0.3 - Cross-Site Request Forgery
Medium
CVE-2025-47543
TrueBooker <= 1.0.7 - Cross-Site Request Forgery
Medium
CVE-2025-47545
Poll Maker <= 5.7.7 - Unauthenticated Race Condition to Multi-Vote
Medium
CVE-2025-47635
WebinarPress <= 1.33.27 - Authenticated (Administrator+) Server-Side Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.