Medium
CVE-2025-27623
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2025-27622
Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Medium
CVE-2025-1762
Event Tickets with Ticket Scanner <= 2.5.3 - Cross-Site Request Forgery to Arbitrary Ticket Deletion
Medium
CVE-2024-13118
IP Based Login <= 2.4.0 - Cross-Site Request forgery to Log Deletion
Critical
CVE-2024-12876
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Medium
CVE-2024-13357
Ditty <= 3.1.51 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2024-9658
School Management System for Wordpress <= 93.0.0 - Authenticated (Student+) Account Takeover and Privilege Escalation
Medium
CVE-2024-12609
School Management System for Wordpress <= 92.0.0 - Authenticated (Student+) SQL Injection via 'view-attendance'
Medium
CVE-2025-0748
Homey <= 2.4.3 - Cross-Site Request Forgery to User Verification
Medium
CVE-2024-12610
School Management System for Wordpress <= 93.0.0 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
Medium
CVE-2024-13904
Platform.ly for WooCommerce <= 1.1.6 - Unauthenticated Blind Server-Side Request Forgery
Medium
CVE-2024-12743
MailPoet <= 5.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13313
AWeber <= 7.3.20 - Authenticated (Admin+) Stored Cross-Site Scripting
High
8b11a4ce-9e11-4c4b-8c61-3de05750f568
Solace Extra <= 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-13906
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection
High
CVE-2024-13320
CURCY - WooCommerce Multi Currency - Currency Switcher <= 2.3.6 - Unauthenticated SQL Injection
High
CVE-2025-1309
UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2024-12036
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-12800
IP Based Login <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12611
School Management System for Wordpress <= 93.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-12035
CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2024-13655
Flex Mag - Responsive WordPress News Theme <= 3.5.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option Deletion
Medium
CVE-2025-0863
Flexmls® IDX <= 3.14.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12809
Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.