Medium
CVE-2025-31739
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-2299
LuckyWP Table of Contents <= 2.1.10 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2025-22281
Simplish <= 2.6.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-30984
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-31794
WR Price List Manager For Woocommerce <= 1.0.8 - Missing Authorization to Arbitrary Content Deletion
Medium
CVE-2025-31900
Lexicata <= 1.0.16 - Reflected Cross-Site Scripting
Medium
CVE-2025-31384
Videos <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31736
Rich Text Editor <= 1.0.1 - Missing Authorization
Medium
CVE-2025-30916
Residential Address Detection <= 2.5.4 - Missing Authorization
Medium
CVE-2025-31905
Team Rosters <= 4.7 - Reflected Cross-Site Scripting
Medium
CVE-2025-31898
MediaView <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-31902
Social Share And Social Locker <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31027
Tiger <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-31573
PeproDev CF7 Database <= 2.0.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-31911
Social Share And Social Locker <= 1.4.2 - Unauthenticated SQL Injection
Medium
CVE-2025-31581
WP Video Playlist <= 1.1.2 - Missing Authorization to Unauthenticated Settings Update
Medium
CVE-2025-31418
Gravel <= 1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-31893
Botnet Attack Blocker <= 2.0.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-31622
Advanced Typekit <= 1.0.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2025-31137
Remix and React Router allow URL manipulation via Host / X-Forwarded-Host headers
Critical
CVE-2025-2005
Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-12410
Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection
Medium
CVE-2025-2483
Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter
Medium
CVE-2024-13637
Demo Awesome <= 1.0.3 - Missing Authorization to Authenticated (Subscriber+) Plugin Activation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.