Medium
CVE-2024-9663
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filters
Medium
CVE-2025-26886
PublishPress Authors <= 4.7.3 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-9662
CYAN Backup <= 2.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-11503
WP Tabs <= 2.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12679
Prisna GWT – Google Website Translator <= 1.4.13 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10566
Slider by 10Web <= 1.2.61 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-12739
Mobile Contact Bar <= 3.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13482
Icegram Engage <= 3.1.31 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-10105
Job Postings <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13686
VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Medium
CVE-2024-10565
Slider by 10Web <= 1.2.61 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
High
CVE-2025-26875
Multiple Shipping And Billing Address For Woocommerce <= 1.3 - Unauthenticated SQL Injection
Medium
CVE-2024-12682
Smart Maintenance Mode <= 1.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13123
AFI – The Easiest Integration Plugin <= 1.99.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-0717
Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13730
Podlove Podcast Publisher <= 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-12680
Prisna GWT – Google Website Translator <= 1.4.13 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-10554
WordPress WP-Advanced-Search <= 3.3.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-13616
VikBooking Hotel Booking Engine & PMS <= 1.7.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-11718
tarteaucitron.js for WordPress < 0.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-1062
Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider <= 3.94.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-9879
Melapress File Monitor <= 2.1.0 - Authenticated (Admin+) Authenticated SQL Injection
Medium
CVE-2025-0718
Nested Pages <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9227
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.