Medium
CVE-2024-13909
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-10894
Payment Forms for Paystack <= 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2025-3417
Embedder 1.3 - 1.3.5 - Authenticated (Subscriber+) Arbitrary Options Update
High
CVE-2025-2809
azurecurve Shortcodes in Comments <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2025-2805
ORDER POST <= 2.0.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-2719
Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) 1.2.8 - 1.4.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
High
CVE-2025-3102
SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation
Medium
CVE-2025-32691
PowerPress Podcasting <= 11.12.6 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-32567
Easy Post Duplicator <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-31383
FrescoChat Live Chat <= 3.2.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-31375
Scheduled <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32541
WooCommerce Sales MIS Report <= 4.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2025-31026
Comment Validation Reloaded <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2025-32499
Logo Showcase Ultimate <= 1.4.4 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2025-32558
Duplicate Title Checker <= 1.2 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32687
Review Stars Count For WooCommerce <= 2.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-32538
Easy Post Duplicator <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-31042
Sandwich Adsense <= 4.0.2 - Missing Authorization
Critical
CVE-2025-31015
WordPress SMTP Service, Email Delivery Solved! — MailHawk <= 1.3.1 - Unauthenticated Local File Inclusion
Medium
CVE-2025-32483
Request Call Back <= 1.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13381
Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-31402
NewsBoard Post and RSS Scroller <= 1.2.12 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32476
Advanced Tag Lists <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2025-32518
ALD Login Page <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.