Medium
CVE-2025-22530
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2024-12112
Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22827
WP Joomag <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22589
Quote Tweet <= 0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12282
WordPress连接微博 <= 2.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22577
Able Player <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22531
Urdu Formatter – Shamil <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22558
mcjh button shortcode <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22546
jQuery TwentyTwenty <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22808
Surbma | Premium WP <= 9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11939
Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data
Medium
CVE-2025-22518
Justified Image Gallery <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22803
Advanced Product Information for WooCommerce <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22536
WP Music Player <= 1.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-22564
Pretty Url <= 1.5.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-22814
Zephyr Admin Theme <= 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22590
Prayer Times Anywhere <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22805
Skill Bar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22550
AddFunc Mobile Detect <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11271
WordPress Webinar Plugin – WebinarPress <= 1.33.24 - Missing Authorization to Authenticated (Subscriber+) Webinar Updates
Medium
CVE-2024-11830
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22587
SEO Bulk Editor <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22823
Genesis Style Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22572
Legacy ePlayer <= 0.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.