Medium
CVE-2025-22764
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-22763
Brizy Pro <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22750
Post Carousel & Slider <= 1.0.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-0466
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.3 - Unauthenticated Information Exposure
Medium
CVE-2025-22779
WP News Sliders <= 1.0 - Missing Authorization
Medium
CVE-2025-0368
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22731
Build Private Store For Woocommerce <= 1.0 - Cross-Site Request Forgery
Medium
CVE-2025-22751
Partners <= 0.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13329
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-9645
Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13115
WP Projects Portfolio with Client Testimonials <= 3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13325
Glossy <= 2.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22743
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10326
RomethemeKit For Elementor <= 1.5.3 - Missing Authorization in save_options and reset_widgets
Medium
CVE-2025-22747
Foundation Columns <= 0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22780
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11848
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2025-22729
VOD Infomaniak <= 1.5.9 - Missing Authorization
Medium
CVE-2025-22755
WP Headmaster <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22761
Ajax Contact Form <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22762
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22775
Catalog Importer, Scraper & Crawler <= 5.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22778
Lijit Search <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12240
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.