Medium
CVE-2025-23975
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2024-12171
ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22688
Unlimited Page Sidebars <= 0.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-22699
Traveler Code <= 3.1.1 - Unauthenticated Arbitrary SQL Injection
Medium
CVE-2025-24710
Gwolle Guestbook <= 4.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22685
Tags to Keywords <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-site Scripting
High
CVE-2025-22701
Traveler Layout Essential For Elementor < 1.4 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2025-22696
Document Block – Upload & Embed Docs <= 1.1.0 - Missing Authorization
Medium
CVE-2025-22691
WP Travel <= 10.1.3 - Authenticated (Author+) SQL Injection
High
CVE-2025-22684
WP BASE Booking <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22703
Forge – Front-End Page Builder <= 1.4.6 - Cross-Site Request Forgery to Stored Cross-site Scripting
Medium
CVE-2025-22695
Nirweb support <= 3.0.3 - Missing Authorization
Medium
CVE-2024-13371
WP Job Portal <= 2.2.6 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-13428
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Unauthenticated Company Logo Deletion
Medium
CVE-2025-22704
WordPress Signature <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-13425
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Company Deletion
Medium
CVE-2025-22698
Accessibility Suite by Ability, Inc <= 4.18 - Missing Authorization
Medium
CVE-2024-13429
WP Job Portal <= 2.2.6 - Insecure Direct Object Reference to Authenticated (Employer+) Arbitrary Job Deletion
Medium
CVE-2025-22260
Meta Tag Manager <= 3.1 - Missing Authorization
Medium
CVE-2025-22690
DigiTimber cPanel Integration <= 1.4.6 - Cross-Site Request Forgery to Stored Cross-site Scripting
Medium
CVE-2025-22705
Disqus Popular Posts <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-24707
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.24 - Reflected Cross-Site Scripting
Medium
CVE-2025-22686
CF7 Google Sheets Connector <= 5.0.17 - Missing Authorization
Medium
CVE-2024-50500
Shortcodes and extra features for Phlox theme <= 2.17.4 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.