Medium
CVE-2024-13856
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,498
Reset filters
High
CVE-2025-2303
Block Logic <= 1.0.8 - Authenticated (Contributor+) Remote Code Execution
Critical
CVE-2026-15282
Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-13920
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Low
CVE-2024-13922
Order Export & Order Import for WooCommerce <= 2.6.0 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Deletion via admin_log_page Function
High
CVE-2024-13923
Order Export & Order Import for WooCommerce <= 2.6.0 - Authenticated (Administrator+) Server-Side Request Forgery via validate_file Function
High
CVE-2025-2539
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
High
CVE-2025-1770
Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
Critical
CVE-2025-2505
Age Gate <= 3.5.3 - Unauthenticated Local PHP File Inclusion via 'lang'
Critical
CVE-2025-26909
Hide My WP Ghost <= 5.4.01 - Unauthenticated Local File Inclusion
Critical
CVE-2025-2512
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function
High
CVE-2024-12563
s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode
Critical
CVE-2024-13790
MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion
Critical
CVE-2025-23937
LinkedIn Lite <= 1.0 - Unauthenticated Local File Inclusion
Critical
CVE-2025-23952
Custom Field List Widget <= 1.5.1 - Unauthenticated Local File Inclusion
Critical
CVE-2024-54362
GetShop ecommerce <= 1.3 - Unauthenticated Local File Inclusion
Critical
CVE-2025-24690
Formality <= 1.5.7 - Unauthenticated Local File Inclusion
Medium
CVE-2025-2267
WP01 – Speed, Security, SEO consultant <= 2.6.2 - Authenticated (Subscriber+) Arbitrary File Download
High
CVE-2025-26890
HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.4 - Unauthenticated Local File Inclusion
Critical
CVE-2025-1771
Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post
Critical
CVE-2024-54291
PluginPass <= 0.9.10 - Unauthenticated Arbitrary File Deletion
High
CVE-2025-2056
WP Ghost <= 5.4.01 - Unauthenticated Limited File Read
High
CVE-2024-13913
InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.83 - Cross-Site Request Forgery to Local File Inclusion
Medium
CVE-2025-1285
Resido - Real Estate WordPress Theme <= 3.6 - Missing Authorization to Unauthenticated Server-Side Request Forgery and API Key Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.