Medium
CVE-2025-24652
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-24610
Restrict Anonymous Access <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Low
CVE-2025-24613
FV Thoughtful Comments <= 0.3.5 - Missing Authorization
Medium
CVE-2025-24673
Ketchup Shortcodes <= 0.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24757
uDesign <= 4.11.2 - Missing Authorization
Medium
CVE-2025-24568
Starter Templates <= 4.4.9 - Cross-Site Request Forgery
Medium
CVE-2025-24743
RomethemeKit For Elementor <= 1.5.2 - Missing Authorization
Low
CVE-2024-6533
Directus has a DOM-Based cross-site scripting (XSS) via layout_options
Medium
CVE-2025-24353
Directus allows privilege escalation using Share feature
High
ghsa-vp47-9734-prjw
ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape
High
CVE-2024-13409
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Medium
CVE-2026-15296
affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12494
BMLT Meeting Map <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-13545
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
Medium
CVE-2024-13683
Automate Hub Free by Sperse.IO <= 1.7.0 - Cross-Site Request Forgery to Activation Status Update
High
CVE-2025-24033
Unlimited consumption of resources in @fastify/multipart
Low
ghsa-74j9-xhqr-6qv3
Reflected Cross Site Scripting (XSS) in error message
Medium
CVE-2024-53299
Apache Wicket: An attacker can intentionally trigger a memory leak
Medium
CVE-2025-24530
phpMyAdmin XSS when checking tables
Medium
CVE-2024-57724
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.
Medium
CVE-2024-57723
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.
High
CVE-2024-57722
lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.
Medium
CVE-2024-57720
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.
Medium
CVE-2024-57721
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.