Medium
CVE-2025-22792
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2025-22784
Background Control <= 1.0.5 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2025-22785
Course Booking System <= 6.0.6 - Unauthenticated SQL Injection
Medium
CVE-2024-12008
W3 Total Cache <= 2.8.1 Information Exposure via Log Files
Medium
CVE-2025-22798
Responsive jQuery Slider <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-51800
Homey <= 2.4.1 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22787
Button Block <= 1.1.5 - Missing Authorization
Medium
CVE-2025-22793
Bold pagos en linea <= 3.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-13347
Essential WP Real Estate <= 1.1.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-13323
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
Medium
CVE-2025-22796
WP-Asambleas <= 2.85.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-12006
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation
Medium
CVE-2025-24651
WebToffee WP Backup and Migration <= 1.5.3 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2024-51888
Homey Login Register <= 2.4.0 - Unauthenticated Privilege Escalation
Medium
CVE-2025-22790
moseter <= 1.3.1 - Reflected Cross-Site Scripting
High
CVE-2025-22786
ElementInvader Addons for Elementor <= 1.2.6 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-22799
Neon Product Designer <= 2.1.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22789
polka dots <= 1.2 - Reflected Cross-Site Scripting
High
CVE-2025-22782
WR Price List Manager For Woocommerce <= 1.0.8 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2025-22797
Gallery and Lightbox <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-33299
Microweber Cross-site Scripting vulnerability
Medium
CVE-2024-33298
Microweber Cross-site Scripting vulnerability
Medium
CVE-2024-33297
Microweber Cross-site Scripting vulnerability
Medium
CVE-2024-12412
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin <= 2.2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.