Medium
CVE-2024-12176
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filters
Medium
CVE-2024-11375
WC1C <= 0.23.0 - Reflected Cross-Site Scripting
High
CVE-2024-11465
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
Critical
CVE-2024-12402
Themes Coder – Create Android & iOS Apps For Your Woocommerce Site <= 1.3.4 - Insecure Direct Object Reference to Password Change/Account Takeover/Privilege Escalation
Medium
CVE-2024-12419
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler <= 1.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Medium
CVE-2025-22297
AI WP Writer <= 3.8.4.4 - Cross-Site Request Forgery
Medium
CVE-2025-22309
SpeakOut! Email Petitions <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12471
Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-12131
WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference
High
CVE-2025-22305
Hero Banner Ultimate <= 1.4.4 - Authenticated (Author+) Local File Inclusion
Medium
CVE-2024-12158
Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Missing Authorization to Unauthenticated DB Table Truncation
Medium
CVE-2025-22303
WP Mailster <= 1.8.17.0 - Unauthenticated Sensitive Information Exposure
High
CVE-2024-49649
Build App Online <= 1.0.23 - Unauthenticated Local File Inclusion
High
CVE-2024-12152
MIPL WC Multisite Sync <= 1.1.5 - Unauthenticated Arbitrary File Download
Medium
CVE-2025-22302
WP Wand <= 1.2.5 - Missing Authorization
High
CVE-2024-12202
Croma Music <= 3.6 - Authenticated (Subscriber+) Arbitrary Options Update in ironMusic_ajax
High
CVE-2024-11725
SMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2025-22299
AI for SEO <= 1.2.9 - Missing Authorization
High
CVE-2024-53800
Rezgo Online Booking <= 4.17 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22298
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
High
CVE-2024-56282
WPMozo Addons Lite for Elementor <= 1.1.0 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2024-49699
ARPrice <= 4.1.3 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-22364
Ach Invoice App <= 1.0.1 - Unauthenticated Local File Inclusion
High
CVE-2024-10932
Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.