Medium
CVE-2025-22804
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-22584
Timeline Pro <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via [placeholder]
Medium
CVE-2025-22532
Simple Photo Sphere <= 0.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22292
Powerful Auto Chat <= 1.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2025-22541
WP Delete Post Copies <= 5.5 - Missing Authorization
Medium
CVE-2024-12328
MAS Elementor <= 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2025-22507
WPMU Prefill Post <= 1.02 - Authenticated (Administrator+) SQL Injection
Low
CVE-2024-46209
REDAXO CMS Cross-site Scripting vulnerability
Low
CVE-2024-35498
Grav Cross-site Scripting vulnerability
Medium
CVE-2024-12699
Service Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-21617
Guzzle OAuth Subscriber has insufficient nonce entropy
Medium
CVE-2024-10866
Export Import Menus <= 1.9.1 - Missing Authorization to Unauthenticated Menu Export
Medium
CVE-2024-12495
Bootstrap Blocks for WP Editor v2 <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12781
Aurum - WordPress & WooCommerce Shopping Theme <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Demo Content Import
Medium
CVE-2024-9502
Master Addons -- Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor <= 2.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip Module
High
CVE-2024-12849
Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read
Medium
CVE-2024-12437
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-12439
Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marketplace' Shortcode
Medium
CVE-2024-9697
Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Update
Medium
CVE-2024-9702
Social Rocket <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-12438
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket <= 4.75 - Reflected Cross-Site Scripting
Medium
CVE-2024-11887
Geo Content <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11756
SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12535
Host PHP Info <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.