Medium
CVE-2024-56296
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2025-22331
Cf7Save Extension <= 1 - Reflected Cross-Site Scripting
Medium
CVE-2024-12701
WP Smart Import : Import any XML File to WordPress <= 1.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22328
Elevio <= 4.4.1 - Cross-Site Request Forgery
Medium
CVE-2025-22332
CloudFlare(R) Cache Purge <= 1.2 - Reflected Cross-Site Scripting
Medium
CVE-2025-22343
wpSOL <= 1.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-22353
BVD Easy Gallery Manager <= 1.0.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-56270
WP SecureSubmit <= 1.5.18 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-56286
Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Editor+) Local File Inclusion
Medium
CVE-2025-22327
EO4WP <= 1.0.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22334
Education LMS <= 0.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-49644
Accessibility by AllAccessible <= 1.3.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-22318
Standard Box Sizes – for WooCommerce <= 1.6.13 - Missing Authorization
Medium
CVE-2025-22349
WordPress Auction Plugin <= 3.7 - Authenticated (Editor+) SQL Injection
Medium
CVE-2025-22341
Hide Login+ <= 3.5.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-22325
Autocompleter <= 1.3.5.2 - Cross-Site Request Forgery
Medium
CVE-2024-56289
Groundhogg <= 3.7.3.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-22351
Contact Form 7 Database – CFDB7 <= 1.0.0 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-49303
Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-56199
phpMyFAQ Vulnerable to Stored HTML Injection at FAQ
Medium
CVE-2024-8447
Narayana deadlock via multiple join requests sent to LRA Coordinator
Medium
CVE-2024-12132
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference
Critical
CVE-2024-56198
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Medium
CVE-2024-11843
Panorama – WordPress Project Management Plugin <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.