Critical
CVE-2025-31095
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2025-31433
Magic Embeds <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31463
TGG WP Optimizer <= 1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-31096
PostX <= 4.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-27001
Shipmondo – A complete shipping solution for WooCommerce <= 5.0.3 - Missing Authorization to Authenticated (Customer+) Information Disclosure
Medium
CVE-2025-31452
WP Ultimate Search <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31076
WP Compress for MainWP <= 6.30.03 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2025-31077
Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31439
Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery
Medium
CVE-2025-31435
Microblog Poster <= 2.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31093
RPS Include Content <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11180
ElementsKit Elementor addons <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-31074
MDJM Event Management <= 1.7.5.2 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-31451
wBounce <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31102
Hostel <= 1.1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-31458
Video Embedder <= 1.7.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31075
MicroPayments <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-30834
Bit Assist <= 1.5.4 - Unauthenticated Path Traversal
Medium
CVE-2025-31434
FormLift for Infusionsoft Web Forms <= 7.5.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31457
LWS SMS <= 2.4.1 - Cross-Site Request Forgery
Medium
CVE-2025-1705
tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-2074
Advanced Google reCAPTCHA <= 1.29 - Authenticated (Subscriber+) Limited SQL Injection via 'sSearch' Parameter
High
CVE-2024-12905
tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File
Medium
CVE-2025-27793
Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.