Medium
CVE-2024-24778
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2024-53382
PrismJS DOM Clobbering vulnerability
Medium
CVE-2024-53386
Stage.js DOM Clobbering vulnerabilty
Medium
CVE-2025-26895
m1.DownloadList <= 0.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11109
WP Google Review Slider <= 15.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2025-1639
Animation Addons for Elementor Pro <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Medium
CVE-2024-12812
WP ERP <= 1.13.3 - Authenticated (Employee+) Insecure Direct Object Reference
Medium
CVE-2024-10143
MB Custom Post Types & Custom Taxonomies <= 2.7.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13383
HD Quiz <= 1.8.14 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2025-1321
teachPress <= 9.0.7 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-9390
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13384
Photo Gallery, Images, Slider in Rbs Image Gallery <= 3.2.23 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9770
WP-Recall – Registration, Profile, Commerce & More <= 16.26.11 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-13621
The GDPR Framework By Data443 <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12109
Product Labels For Woocommerce (Sale Badges) <= 1.5.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-26989
Zigaform – Form Builder Lite <= 7.4.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-10703
Registrations for the Events Calendar <= 2.13.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12769
Simple Banner <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10638
Product Labels For Woocommerce (Sale Badges) <= 1.5.10 - Authenticated (Admin+) SQL Injection
Critical
CVE-2025-1307
Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-10639
Auto Prune Posts <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12716
Simple Basic Contact Form <= 20240511 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13619
LifterLMS <= 8.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11719
tarteaucitron.js for WordPress < 0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.