Medium
CVE-2024-10703
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2024-12769
Simple Banner <= 3.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10638
Product Labels For Woocommerce (Sale Badges) <= 1.5.10 - Authenticated (Admin+) SQL Injection
Critical
CVE-2025-1307
Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-10639
Auto Prune Posts <= 2.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12716
Simple Basic Contact Form <= 20240511 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13619
LifterLMS <= 8.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-11719
tarteaucitron.js for WordPress < 0.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-9831
Taskbuilder <= 3.0.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-13486
Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10475
Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-0329
AI ChatBot for WordPress – WPBot <= 6.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Critical
CVE-2025-0912
GiveWP – Donation Plugin and Fundraising Platform <= 3.19.4 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10818
JSFiddle Shortcode <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-26899
Recapture for WooCommerce <= 1.0.43 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-10472
Stylish Price List <= 7.1.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10560
Form Maker by 10Web <= 1.15.29 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12808
WP ERP <= 1.13.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24654
SEO Plugin by Squirrly SEO <= 12.4.07 - Missing Authorization
Medium
CVE-2024-11273
Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-11272
Contact Form & SMTP Plugin for WordPress by PirateForms <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13122
AFI – The Easiest Integration Plugin <= 1.99.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12683
Smart Maintenance Mode <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13729
Podlove Podcast Publisher <= 4.1.23 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.