Medium
CVE-2024-13896
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-27267
Random Quotes <= 1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-26575
Display Post Meta <= 2.4.4 -Reflected Cross-Site Scripting
Medium
CVE-2025-23757
ZD Scribd iPaper <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23714
AppReview <= 0.2.9 - Reflected Cross-Site Scripting
High
CVE-2025-28942
Trust Payments Gateway for WooCommerce <= 1.1.4 - Unauthenticated SQL Injection
Medium
CVE-2025-23964
Google Plus <= 1.0.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-26542
Zalo Live Chat <= 1.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23728
AuMenu <= 1.1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-26573
Rizzi Guestbook <= 4.0.1 - Reflected Cross-Site Scripting
High
CVE-2024-13558
NP Quote Request for WooCommerce <= 1.9.179 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure
Medium
CVE-2024-13920
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
High
CVE-2024-13921
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Admin+) PHP Object Injection via form_data Parameter
Low
CVE-2024-13922
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
High
CVE-2024-13923
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
High
CVE-2025-2539
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
Medium
CVE-2025-2536
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS)
High
CVE-2025-29926
The WikiManager REST API allows any user to create wikis
High
CVE-2025-29925
XWiki allows unregistered users to access private pages information through REST endpoint
High
CVE-2025-29924
XWiki uses the wrong wiki reference in AuthorizationManager
High
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Low
CVE-2025-31675
Drupal core - SA-CORE-2025-004
Low
CVE-2025-30197
Jenkins Zoho QEngine Plugin Displays Unmasked API Keys
High
CVE-2025-30196
Jenkins AnchorChain Plugin Has a Cross-Site Scripting (XSS) Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.