Medium
CVE-2025-22316
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-24639
Korea for WooCommerce <= 1.1.11 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2025-22308
Smart Custom Fields <= 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13056
Dyn Business Panel <= 1.0.0 - Reflected Cross-Site Scripting
High
CVE-2024-53800
Rezgo Online Booking <= 4.17 - Unauthenticated Local File Inclusion
Medium
CVE-2024-12280
WP Customer Area <= 8.2.4 - Cross-Site Request Forgery to Event Log Deletion
Medium
CVE-2024-11282
Passster – Password Protect Pages and Content <= 4.2.10 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Medium
CVE-2024-11749
App Embed <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13095
WP Triggers Lite <= 2.5.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-22298
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
Medium
CVE-2024-12774
Altra Side Menu <= 2.0 - Cross-Site Request Forgery to Arbitrary Menu Deletion
Medium
CVE-2025-22313
Widgetize Pages Light <= 3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54249
Advanced Options Editor <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54237
Ni CRM Lead <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24632
Advanced Dynamic Pricing for WooCommerce <= 4.9.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24635
Paytm Payment Donation <= 2.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-24630
Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting
Medium
CVE-2025-53349
Kalium <= 3.18.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12279
WP Social AutoConnect <= 4.6.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12475
WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12221
Turnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce Parameter
Medium
CVE-2024-56332
Next.js Allows a Denial of Service (DoS) with Server Actions
Medium
CVE-2024-11930
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode
Medium
CVE-2024-12545
Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.