Medium
CVE-2025-24606
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-11852
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Medium
CVE-2025-24592
SysBasics Customize My Account for WooCommerce <= 2.8.22 - Reflected Cross-Site Scripting
Medium
CVE-2024-55342
Piranha CMS Cross-site Scripting vulnerability
Medium
CVE-2024-55341
Piranha CMS Cross-site Scripting vulnerability
Medium
CVE-2024-12875
Easy Digital Downloads <= 3.3.2 - Authenticated (Admin+) Arbitrary File Download
Medium
CVE-2024-10453
Elementor Website Builder – More than Just a Page Builder <= 3.25.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Typography Settings
Medium
CVE-2024-12558
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db
Medium
CVE-2024-11688
LaTeX2HTML <= 2.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-11722
Frontend Admin by DynamiApps <= 3.25.1 - Unauthenticated SQL Injection
Medium
CVE-2024-12588
Shortcodes and extra features for Phlox theme <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Staff Widget
Medium
CVE-2024-9545
Shortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps Shortcodes
Medium
CVE-2024-10797
Full Screen Menu for Elementor <= 1.0.7 - Authenticated (Contributor+) Post Disclosure
Medium
CVE-2024-11808
Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting
High
CVE-2024-56334
Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)
High
CVE-2024-12721
Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2024-12697
real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11938
One Click Upsell Funnel for WooCommerce <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via wps_wocuf_pro_yes Shortcode
Medium
CVE-2024-11287
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting
Medium
CVE-2024-12262
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'
Medium
CVE-2024-11975
Reactflow Visitor Recording and Heatmaps <= 1.0.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-11196
Multi-column Tag Map <= 17.0.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via mctagmap Shortcode
High
CVE-2024-12066
SMSA Shipping(official) <= 2.3 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2024-11682
G Web Pro Store Locator <= 2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.