Medium
CVE-2026-24375
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2025-49043
Magic Responsive Slider and Carousel WordPress <= 1.6 - Reflected Cross-Site Scripting
Medium
CVE-2025-14360
Blockons <= 1.2.15 - Missing Authorization
Medium
CVE-2026-24371
BA Book Everything <= 1.8.16 - Missing Authorization
Medium
CVE-2025-49045
Super Interactive Maps <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-0675
NextGEN Download Gallery <= 1.6.2 - Unauthenticated Information Exposure
Medium
CVE-2025-69169
Easy Media Download <= 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-48094
Magic Slider <= 2.2 - Reflected Cross-Site Scripting
Medium
CVE-2026-0674
Campaign Monitor for WordPress <= 2.9.1 - Missing Authorization
Medium
CVE-2025-22713
WooCommerce Orders & Customers Exporter <= 5.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24387
WP Quick Post Duplicator <= 2.1 - Missing Authorization
Medium
CVE-2026-24358
Quiz And Survey Master <= 10.3.3 - Missing Authorization
Medium
CVE-2025-27004
Famous - Responsive Image And Video Grid Gallery WordPress <= 1.4 - Reflected Cross-Site Scripting
High
CVE-2025-22725
Virtual Assistant <= 3.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2025-50003
Amuli <= 2.3.0 - Unauthenticated Local File Inclusion
High
CVE-2025-49055
Lead Capturing Pages <= 2.5 - Unauthenticated SQL Injection
High
CVE-2025-54003
Depot <= 1.16 - Unauthenticated Local File Inclusion
Medium
CVE-2025-22726
nK Themes Helper <= 1.7.9 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2026-27090
Kenta Companion <= 1.3.3 - Cross-Site Request Forgery
Medium
CVE-2025-22715
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Medium
CVE-2025-14984
Gutenverse Form <= 2.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2025-13679
Tutor LMS <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_details
Medium
CVE-2025-12640
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement
Medium
CVE-2025-14275
Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.