Medium
CVE-2024-13791
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
Critical
CVE-2024-10763
Campress <= 1.35 - Unauthenticated Local File Inclusion
Critical
CVE-2024-10960
Brizy – Page Builder <= 2.6.4 - Authenticated (Contributor+) Arbitrary File Upload via storeUploads
Critical
CVE-2024-13365
Security & Malware scan by CleanTalk <= 2.149 - Unauthenticated Arbitrary File Upload
High
CVE-2025-22630
Widget Options <= 4.1.0 - Authenticated (Contributor+) Remote Code Execution
High
CVE-2024-13714
All-Images.ai – IA Image Bank and Custom Image creation <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-13011
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload
High
CVE-2024-7419
WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields
Medium
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
High
CVE-2025-1028
Contact Manager <= 8.6.4 - Unauthenticated Arbitrary Double File Extension Upload
High
CVE-2025-22656
Cookie Monster <= 1.2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22672
Video & Photo Gallery for Ultimate Member <= 1.1.2 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-12859
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Critical
CVE-2025-22663
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.2.16 - Unauthenticated Arbitrary File Deletion
Critical
CVE-2025-25122
WizShop <= 3.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-25162
Sports Rankings and Lists <= 1.0.2 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-25163
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Critical
CVE-2025-25130
Delete Comments By Status <= 2.1.1 - Unauthenticated Local File Inclusion
Critical
CVE-2025-25141
Fami Sales Popup <= 2.0.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-25109
WP Vehicle Manager <= 3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-0365
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
High
CVE-2025-22701
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-13371
WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
High
CVE-2025-0366
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.