High
CVE-2024-12315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
High
CVE-2024-13643
Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification
Critical
CVE-2025-0181
WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request
Medium
CVE-2024-7425
WP All Export Pro <= 1.9.1 - Authenticated (ShopManager+) Arbtirary Options Update
High
CVE-2024-7419
WP All Export Pro <= 1.9.1 - Unauthenticated Remote Code Execution via Custom Export Fields
High
CVE-2024-9664
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
Critical
CVE-2025-1061
Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider
Medium
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
Medium
CVE-2024-10152
Simple Certain Time to Show Content <= 1.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-13403
WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter
High
CVE-2025-22656
Cookie Monster <= 1.2.2 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22662
SendPulse Email Marketing Newsletter <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12859
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-25076
Graceful Email Obfuscation <= 0.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-22665
RapidLoad <= 2.4.4 - Missing Authorization
Critical
CVE-2025-22663
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams <= 7.2.16 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-24694
CM E-Mail Blacklist – Simple email filtering for safer registration <= 1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-11134
Eventer <= 3.9.9 - Missing Authorization to Authenticated (Subscriber+) Bookings Export
Medium
CVE-2025-22649
WP Project Manager <= 2.6.22 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13607
JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Authenticated (Subscriber+) Insecure Direct Object Reference
Medium
CVE-2025-22647
AIO Performance Profiler, Monitor, Optimize, Compress & Debug <= 1.2 - Missing Authorization
Critical
CVE-2025-25122
WizShop <= 3.0.2 - Unauthenticated Local File Inclusion
High
CVE-2025-25162
Sports Rankings and Lists <= 1.0.2 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-25163
Plugin A/B Image Optimizer <= 3.3 - Authenticated (Subscriber+) Arbitrary File Download
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.