Medium
CVE-2025-24753
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2025-24611
WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File Read
Medium
CVE-2025-24706
WC Marketplace <= 4.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24587
Email Subscription Popup <= 1.2.23 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2025-24546
Ultimate Coming Soon & Maintenance <= 1.0.9 - Cross-Site Request Forgery
Medium
CVE-2025-24701
Chained Quiz <= 1.3.2.9 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2025-24666
AI Chatbot for WordPress – Hyve Lite <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24552
Paytium <= 4.4.11 - Unauthenticated Full Path Disclosure
High
CVE-2024-12600
Custom Product Tabs Lite for WooCommerce <= 1.9.0 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2025-24739
FluentSMTP <= 2.2.80 - Cross-Site Request Forgery
Medium
CVE-2025-24702
Xagio SEO <= 7.0.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-24727
Contact Form Email <= 1.3.52 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-0682
ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Medium
CVE-2025-24568
Starter Templates <= 4.4.9 - Cross-Site Request Forgery
High
CVE-2024-13409
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion via post_type_ajax_handler()
Critical
CVE-2024-13545
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
High
CVE-2024-13408
Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-13119
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13121
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13120
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13698
Jobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image Generation
Medium
CVE-2024-13389
Cliptakes <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13511
Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset
High
CVE-2024-13593
BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.