Mittel
CVE-2025-23768
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 41.670
Filter zurücksetzen
Mittel
CVE-2024-13393
Video Share VOD – Turnkey Video Site Builder Script <= 2.6.31 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-13392
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-13125
Everest Forms – Contact Forms, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Mittel
CVE-2024-13516
Kubio AI Page Builder <= 2.3.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-10483
Simple:Press Forum <= 6.10.10 - Reflected Cross-Site Scripting via msearch
Mittel
CVE-2024-13515
Image Source Control Lite – Show Image Credits and Captions <= 2.28.0 - Reflected Cross-Site Scripting
Mittel
CVE-2024-12071
Evergreen Content Poster – Auto Post and Schedule Your Best Content to Social Media <= 1.4.4 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Mittel
CVE-2024-13385
JSM Screenshot Machine Shortcode <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2024-13517
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Title
Mittel
CVE-2024-13492
Guten Free Options <= 0.9.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-13126
Download Manager <= 3.3.06 - Unauthenticated Information Disclosure via Unprotected Directory
Mittel
CVE-2025-23727
AZ Content Finder <= 0.1 - Reflected Cross-Site Scripting
Hoch
CVE-2025-23931
WordPress Local SEO <= 2.3 - Unauthenticated SQL Injection
Mittel
CVE-2024-13519
MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution <= 1.9.80 - Authenticated (Shop Manager+) Stored Cross-Site Scripting
Mittel
CVE-2024-13317
ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Update
Mittel
CVE-2025-0515
Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option Update
Niedrig
3a3fa988-6f0b-48d3-a946-0fc587858c9c
WPSyncSheets Lite For Elementor – Elementor Pro Form Google Spreadsheet Addon <= 1.4 - Running Vulnerable Dependencies
Mittel
CVE-2025-0554
Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Mittel
CVE-2024-13352
Legull <= 1.2.2 - Reflected Cross-Site Scripting
Mittel
CVE-2025-23475
History timeline <= 0.7.2 - Reflected Cross-Site Scripting
Mittel
CVE-2024-13391
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Mittel
CVE-2025-23995
Tantyyellow <= 1.0.0.5 - Reflected Cross-Site Scripting
Mittel
CVE-2024-12370
WP Hotel Booking <= 2.1.5 - Missing Authorization
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.