Medium
CVE-2024-13392
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,681
Reset filters
Medium
CVE-2025-23962
Goldstar <= 2.1.1 - Missing Authorization
Medium
CVE-2025-23453
Stars SMTP Mailer <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2025-23944
WOOEXIM – WooCommerce Export Import Plugin <= 5.0.0 - Unauthenticated PHP Object Injection
Critical
CVE-2025-23932
Quick Count <= 3.00 - Unauthenticated PHP Object Injection
High
CVE-2025-23914
Optimize Your Campaigns – Google Shopping – Google Ads – Google Adwords <= 3.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-23723
Plestar Directory Listing <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-23901
GravatarLocalCache <= 1.1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-10789
WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update
Critical
CVE-2024-12919
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id
High
CVE-2024-12627
Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups <= 1.3.5 - Missing Authorization to Authenticated (Contributor+) PHP Object Injection
High
CVE-2025-22510
WC Price History for Omnibus <= 2.1.4 - Authenticated (Shop manager+) PHP Object Injection
Medium
CVE-2025-22804
Author Avatars List/Block <= 2.1.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12438
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket <= 4.75 - Reflected Cross-Site Scripting
Medium
CVE-2024-11887
Geo Content <= 6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-12313
Compare Products for WooCommerce <= 3.2.1 - Unauthenticated PHP Object Injection
Medium
CVE-2024-11337
Horoscope And Tarot <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11465
Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
Medium
CVE-2024-11369
Store credit / Gift cards for woocommerce <= 1.0.49.46 - Reflected Cross-Site Scripting
High
CVE-2024-49699
ARPrice <= 4.1.3 - Authenticated (Subscriber+) PHP Object Injection
Medium
CVE-2025-22357
Target Notifications <= 1.1.1 - Reflected Cross-Site Scripting
Critical
CVE-2024-49688
ARPrice <= 4.1.3 - Unauthenticated PHP Object Injection
Critical
CVE-2024-56291
PlainInventory <= 3.1.6 - Unauthenticated PHP Object Injection
Critical
CVE-2024-56283
Locatoraid Store Locator <= 3.9.50 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.