Medium
CVE-2025-22588
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-12855
AdForest - Classified Ads WordPress Theme <= 5.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post/Attachment Deletion
Medium
CVE-2025-22561
Title Experiments Free <= 9.0.4 - Missing Authorization
Medium
CVE-2024-12030
MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22559
TubePress.NET <= 4.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22818
S3Player – WooCommerce & Elementor Integration <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22811
MT Addons for Elementor <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22515
Show Google Analytics widget <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-22508
FAT Event Lite <= 1.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22593
Laika Pedigree Tree <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22586
WPEX Replace DB Urls <= 0.4.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22552
Affiliate Disclosure Statement <= 0.3 - Cross-Site Request Forgery
Medium
CVE-2025-22807
Responsive Flickr Slideshow <= 2.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22595
Mailing Group Listserv <= 2.0.9 - Reflected Cross-Site Scripting
Critical
CVE-2025-22504
4ECPS Web Forms <= 0.2.18 - Unauthenticated Arbitrary File Upload
High
CVE-2024-11816
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2025-22514
KNR Author List Widget <= 3.1.1 - Reflected Cross-Site Scripting
High
CVE-2025-22570
Inline Tweets <= 2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22555
Smoothness Slider Shortcode <= v1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12045
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-22543
ST Gallery WP <= 1.0.8 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Medium
CVE-2025-22826
Sell Digital Downloads <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22547
JK Html To Pdf <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22554
Video Embed Optimizer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.