Medium
CVE-2025-22303
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,073
Reset filters
Medium
CVE-2024-12532
BWD Elementor Addons <= 4.3.18 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Medium
CVE-2025-24639
Korea for WooCommerce <= 1.1.11 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2024-11282
Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-13095
WP Triggers Lite <= 2.5.3 - Authenticated (Admin+) SQL Injection
High
CVE-2024-51818
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection
Medium
CVE-2024-49666
ARPrice <= 4.1.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56300
Post/Page Copying Tool <= 2.0.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-22361
Opentracker Analytics <= 1.3 - Reflected Cross-Site Scripting
High
CVE-2024-49655
ARPrice <= 4.1.3 - Unauthenticated SQL Injection
High
CVE-2024-56290
Multiple Shipping And Billing Address For Woocommerce <= 1.2 - Unauthenticated SQL Injection
Medium
CVE-2024-12195
WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22352
ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Shop manager+) SQL Injection
Medium
CVE-2024-49333
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-22348
DynamicTags <= 1.4.0 - Authenticated (Subscriber+) SQL Injection
High
CVE-2024-56284
SSL Wireless SMS Notification <= 3.5.0 - Unauthenticated SQL Injection
Medium
CVE-2025-22350
Ultimate Learning Pro <= 3.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-56270
WP SecureSubmit <= 1.5.18 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-22349
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-22351
Contact Form 7 Database – CFDB7 <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-49303
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56247
WP Post Author <= 3.8.2 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-56250
Just Writing Statistics <= 4.7 - Authenticated (Administrator+) SQL Injection
High
CVE-2025-24612
Shipping for Nova Poshta plugin for WordPress <= 1.19.6 - Unauthenticated SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.