Medium
CVE-2025-22747
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-22780
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11848
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
Medium
CVE-2025-22729
VOD Infomaniak <= 1.5.9 - Missing Authorization
Medium
CVE-2025-22755
WP Headmaster <= 0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22761
Ajax Contact Form <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22762
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22775
Catalog Importer, Scraper & Crawler <= 5.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22778
Lijit Search <= 1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12240
Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter
High
CVE-2025-0394
Groundhogg <= 3.7.3.5 - Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function
Medium
CVE-2024-13156
HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter
Medium
CVE-2025-0393
Royal Elementor Addons and Templates <= 1.7.1006 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
High
CVE-2024-12365
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
Medium
CVE-2024-11734
Denial of Service in Keycloak Server via Security Headers
Medium
CVE-2024-11736
Keycloak allows unrestricted admin use of system and environment variables
Medium
CVE-2025-23026
jte's HTML templates containing Javascript template strings are subject to XSS
Low
ghsa-mgr7-5782-6jh9
The Umbraco Heartcore headless client library uses a vulnerable Refit dependency package
Medium
CVE-2024-11396
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
Medium
CVE-2025-22791
offset writing <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22795
Multilang Contact Form <= 1.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-22794
World Cup Predictor <= 1.9.6 - Reflected Cross-Site Scripting
Critical
CVE-2024-12919
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
Medium
CVE-2025-22788
CoDesigner WooCommerce Builder for Elementor <= 4.21 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.