Medium
CVE-2025-31788
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-31906
WP Profitshare <= 1.4.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31830
Printus <= 1.2.6 - Missing Authorization
Medium
CVE-2025-31548
Ultimate Push Notifications <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-31742
Dima Take Action <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31812
BuddyPress Members Only <= 3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31810
Question Answer <= 1.2.70 - Missing Authorization
Medium
CVE-2025-31771
Team Members for Elementor Page Builder <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31786
Simple Icons <= 2.8.4 - Missing Authorization
High
CVE-2025-31855
SMM API <= 6.0.30 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-31886
Social proof testimonials and reviews by Repuso <= 5.21 - Missing Authorization
Medium
CVE-2025-31462
CGM Event Calendar <= 0.8.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31853
Smartarget Popup <= 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31859
Feedbucket – Website Feedback Tool <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2025-31550
WP-LESS <= 1.9.6 - Unauthenticated Sensitive Information Disclosure
Medium
CVE-2025-31741
Easy Magazine <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
ghsa-qq4x-c6h6-rfxh
aws-cdk-lib has Insertion of Sensitive Information into Log File vulnerability when using Cognito UserPoolClient Construct
Medium
CVE-2025-31128
drupal/gifplayer - SA-CONTRIB-2025-032
Medium
CVE-2025-29908
Netty QUIC hash collision DoS attack
Medium
CVE-2025-3016
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/Asset
High
CVE-2025-3015
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/
High
CVE-2025-2891
WP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File Upload
Low
CVE-2025-3001
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approach
Medium
CVE-2024-12189
WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.