Medium
CVE-2025-25106
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2024-13529
SocialV - Social Network and Community BuddyPress Theme <= 2.0.15 - Missing Authorization to Arbitrary File Download
Medium
CVE-2025-22650
Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. <= 1.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-13924
Starter Templates by FancyWP <= 2.0.0 - Unauthenticated Blind Server-Side Request Forgery
Critical
CVE-2024-13742
iControlWP – Multiple WordPress Site Manager <= 4.4.5 - Unauthenticated PHP Object Injection
Medium
CVE-2024-13561
Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
Medium
CVE-2024-12076
Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-24570
Atarim <= 4.0.8 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-12600
Custom Product Tabs Lite for WooCommerce <= 1.9.0 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2025-24568
Starter Templates <= 4.4.9 - Cross-Site Request Forgery
Medium
CVE-2026-15296
affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13119
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13121
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13120
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.15.19 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13335
Sastra Essential Addons for Elementor – Free Elementor Addons, Widgets and Templates <= 1.0.14 - Missing Authorization to Spexo Theme Install
Medium
CVE-2024-13511
Variation Swatches for WooCommerce 1.0.8 - 1.3.2 - Cross-Site Request Forgery to Plugin Settings Reset
High
CVE-2025-0429
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms
High
CVE-2025-24671
Save as PDF Plugin by Pdfcrowd <= 4.4.0 - Unauthenticated PHP Object Injection
High
CVE-2025-0428
AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
High
a5c7a019-953f-441e-b4d5-26f406f9853d
aDirectory – WordPress Directory Listing Plugin <= 1.6.5 - Unauthenticated PHP Object Injection
Medium
CVE-2024-12104
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion
High
CVE-2024-10936
String Locator <= 2.6.6 - Unauthenticated PHP Object Injection
High
CVE-2025-24661
Taxi Booking Manager for WooCommerce – WordPress plugin | Ecab <= 1.1.8 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-24601
FundPress <= 2.0.6 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.