Medium
CVE-2024-13647
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
High
CVE-2025-1717
Login Me Now <= 1.7.2 - Authentication Bypass
High
CVE-2025-1282
Car Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and Read
Medium
CVE-2024-13881
Link My Posts <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-1690
ThemeMakers Stripe Checkout <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-13877
Passbeemedia Web Push Notification <= 1.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-2297
Bricksbuilder <= 1.9.6.1 - Authenticated (Contributor+) Privilege Escalation via create_autosave
Medium
CVE-2024-13878
SpotBot <= 0.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2025-1450
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp – Chaty <= 3.3.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-13876
mEintopf <= 0.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-26925
Admin Menu Manager <= 1.0.3 - Cross-Site Request Forgery
High
CVE-2025-1295
Templines Elementor Helper Core <= 2.7 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-1232
Site Reviews <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-13875
WP-PManager <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-1689
ThemeMakers PayPal Express Checkout <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-1454
Ninja Pages <= 1.4.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13402
BuddyBoss Platform <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'
Medium
CVE-2024-13907
Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid <= 1.16.8 - Authenticated (Administrator+) Server-Side Request Forgery
Medium
CVE-2024-13217
Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Medium
CVE-2025-1286
Download HTML TinyMCE Button <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-1249
Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.4.1 - Missing Authorization
Medium
CVE-2024-13880
My Quota <= 1.0.8 - Reflected Cross-Site Scripting
Medium
CVE-2024-6810
Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13560
Subscriptions & Memberships for PayPal <= 1.1.6 - Cross-Site Request Forgery to Arbitrary Post Deletion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.