Medium
CVE-2025-47480
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-47587
YaySMTP <= 2.6.4 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-47628
QS Dark Mode <= 3.0 - Missing Authorization
Medium
CVE-2025-47455
Integration for WooCommerce and Salesforce <= 1.7.5 - Open Redirect
Medium
CVE-2025-47616
aBlocks <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47441
Progress Bar <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47656
Spiraclethemes Site Library <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47476
Cost Calculator for Elementor <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47547
SendPulse Email Marketing Newsletter <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47638
WP Discord Invite <= 2.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-4190
CSV Mass Importer <= 1.2 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2025-47684
Smaily for WP <= 3.1.6 - Cross-Site Request Forgery
Medium
CVE-2025-47473
PW WooCommerce Bulk Edit <= 2.134 - Cross-Site Request Forgery
Medium
CVE-2025-47676
User Login History <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47486
Gutenberg & Elementor Templates Importer For Responsive <= 3.1.9 - Missing Authorization
High
CVE-2025-47439
Download Monitor <= 5.0.22 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-47633
Awin – Advertiser Tracking for WooCommerce <= 2.0.0 - Cross-Site Request Forgery
High
CVE-2024-13793
Wolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore
Medium
CVE-2025-47632
Awesome Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47667
LiveAgent <= 4.4.7 - Cross-Site Request Forgery
Medium
CVE-2025-47644
Integrations of Zoho CRM with Elementor form <= 1.0.7 - Open Redirect
Medium
CVE-2025-47499
Simple Blog Stats <= 20250416 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-47517
Accept Donations with PayPal <= 1.4.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-47639
Supertext Translation and Proofreading <= 4.25 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.