High
CVE-2024-13831
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2025-0767
WP Activity Log <= 5.3.2 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2025-27304
Contact Form 7 Star Rating with font Awesome <= 1.3 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2025-27300
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Admin+) PHP Object Injection
Medium
CVE-2025-27303
Contact Form 7 Star Rating <= 1.10 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2025-27301
NHR Options Table Manager <= 1.1.2 - Authenticated (Admin+) PHP Object Injection
High
CVE-2025-26921
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.2.6 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-26967
Events Calendar for GeoDirectory <= 2.3.14 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2025-26993
Atarim <= 4.1.0 - Reflected Cross-Site Scripting
High
CVE-2025-26999
ProfileGrid <= 5.9.4.3 - Authenticated (Subscriber+) PHP Object Injection
Critical
CVE-2025-26900
Flexmls® IDX <= 3.14.27 - Unauthenticated PHP Object Injection
High
CVE-2025-26885
Assistant <= 1.5.1 - Authenticated (Editor+) PHP Object Injection
High
CVE-2024-13899
Mambo Importer <= 1.0 - Authenticated (Administrator+) PHP Object Injection
Critical
CVE-2025-27286
Saoshyant Slider <= 3.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-27287
SS Quiz <= 2.0.5 - Unauthenticated PHP Object Injection
High
CVE-2024-13869
Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
Critical
CVE-2024-13789
Ravpage <= 2.31 - PHP Object Injection
High
CVE-2024-13556
Affiliate Links: WordPress Plugin for Link Cloaking and Link Management <= 3.0.1 - Missing Authorization to Unauthenticated Import/Export and PHP Object Injection
Medium
CVE-2024-13834
Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme <= 3.1.4 - Authenticated (Contributor+) Blind Server-Side Request Forgery via remote_request
High
CVE-2025-26763
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Editor+) PHP Object Injection
Critical
CVE-2024-12562
s2Member Pro <= 241216 - Unauthenticated PHP Object Injection
High
CVE-2024-13770
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
Critical
CVE-2025-0181
WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request
High
CVE-2024-9664
WP All Import Pro <= 4.9.7 - Authenticated (Administrator+) PHP Object Injection via Import File
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.