High
CVE-2024-11465
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Low
CVE-2024-10527
Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure
Medium
CVE-2024-9208
Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-12402
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Medium
CVE-2024-11437
Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2024-12416
Woomotiv <= 3.6.1 - Unauthenticated SQL Injection
Medium
CVE-2024-12541
Chative Live chat and Chatbot <= 1.1 - Cross-Site Request Forgery via add_chative_widget_action Function
Medium
CVE-2024-12419
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler <= 1.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Medium
CVE-2024-12538
Duplicate Post, Page and Any Custom Post <= 3.5.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
Medium
CVE-2024-12557
Transporters.io <= 2.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12559
ClickDesigns <= 1.8.0 - Missing Authorization to API Key Modification or Removal
Medium
CVE-2024-11777
Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12528
WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12592
Sellsy <= 2.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11934
Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce <= 2.1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-11899
Slider Pro Lite <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12590
WP Youtube Gallery <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2025-22297
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery
Medium
CVE-2024-49294
Bus Ticket Booking with Seat Reservation <= 5.4.3 - Cross-Site Request Forgery
Medium
CVE-2024-12436
WP Customer Area <= 8.2.4 - Cross-Site Request Forgery to Bulk Deletion
Medium
CVE-2024-51715
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-22309
SpeakOut! Email Petitions <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-10504
Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-22294
Custom Field For WP Job Manager <= 1.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.