Medium
CVE-2025-22513
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2025-22553
Multiple Carousel <= 2.0 - Unauthenticated SQL Injection
Critical
CVE-2024-11613
WordPress File Upload <= 4.24.15 - Unauthenticated Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion
Medium
CVE-2025-22810
Content Blocks Builder <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22567
TRUSTist REVIEWer <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22806
Black Widgets For Elementor <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22812
News Ticker Widget for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22517
List Pages at Depth <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12749
Competition Form <= 2.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-22520
Tock Widget <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22824
Live Flight Radar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22512
Help Scout <= 6.5.6 - Missing Authorization
Medium
CVE-2025-22525
Donation Block For PayPal <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22549
WP Github <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12521
Slotti Ajanvaraus <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22816
Power Mag <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22580
Biltorvet Dealer Tools <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22574
ICS Button <= 0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22578
WP Cookie <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-22819
Qr Code and Barcode Scanner Reader <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-22540
Emailing Subscription <= 1.4.1 - Unauthenticated SQL Injection
Medium
CVE-2025-22524
formafzar <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22802
Email Templates Customizer for WordPress – Drag And Drop Email Templates Builder – YeeMail <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22527
Mailing Group Listserv <= 2.0.9 - Authenticated (Administrator+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.